Cybersecurity and Individual Liability: "United States v. Sullivan" and the Criminalization of a Cyber Attack Response

May 10, 2022  |  New York Law Journal

Cyberattacks, data breaches and ransomware have become the stuff of regular business and boardroom discussions. The duties that flow from these matters – to have adequate cybersecurity systems and respond appropriately in case of a breach – have fallen to organizations, not individuals – at least until now. In my latest article for the New York Law Journal, “Cybersecurity and Individual Liability: United States v. Sullivan and the Criminalization of a Cyber Attack Response,” I discuss a pending federal criminal prosecution in which an individual has been charged with fraud and other offenses which arise from Uber Technologies’ response to a 2016 data breach.   

Cybersecurity and Individual Liability: "United States v. Sullivan" and the Criminalization of a Cyber Attack Response (pdf | 238.85 KB)