Episode 103 of the Cyber Law Revolution is live!

CIPA lawsuits are rapidly becoming one of the biggest privacy risks facing businesses today. In this episode, cybersecurity attorney Spencer Pollock explains how a decades-old California wiretapping law is being used to challenge common website technologies like analytics tools, tracking pixels, session replay software, and chatbots.

Tune in to learn why these lawsuits are increasing, who may be at risk, and the practical steps organizations can take to reduce their exposure.

Keep the questions and calls coming! 410-917-5189 or spollock@mcdonaldhopkins.com.

Episode 102 of the Cyber Law Revolution is Live!

On this episode, we break down the recent discussion around Anthropic’s Mythos and what it could mean for the future of cybersecurity. 

The issue is not a reported breach, but something potentially bigger: advanced AI models may be moving from helping attackers write better phishing emails to helping identify, test, and potentially exploit technical vulnerabilities faster than ever before. 

We discuss why financial institutions, regulators, vendors, insurers, and business leaders should be paying attention, how AI may compress the timeline between vulnerability discovery and exploitation, and what organizations should be doing now to strengthen resilience, improve patching, assess vendor risk, and prepare their incident response plans for a faster-moving threat environment. 

Keep the calls, questions, comments, etc. coming - 4109175189 or spollock@mcdonaldhopkins.com

Ep. 101 of the Cyber Law Revolution is live!

Thrilled to have Kelly Johnson from Swift Currie on to talk all things cyber insurance coverage, both from the insured and insurer perspective, along with where coverage is going in the next five years!

You won't want to miss it!

Episode 100(!!!!!) of the Cyber Law Revolution is live!

A bit sentimental because it's been five years since I launched this podcast, and reaching 100 is pretty cool to me!

Looking back on the last five years and listening to my past podcasts was both entertaining and horrifying. Specifically, so much has changed and continues to evolve. That is the best part about cyber (whether law, insurance, security, crisis comms, etc.): everything is constantly shifting! We are forced to keep pace, continue learning, and bring our A-game to every engagement.

Thank you to everyone who has listened, commented, sent questions, etc. I am truly honored that everyone has taken their time to come to the show. If I forgot to tag you, please forgive me (it was hard to figure out each person who was on the last five years).

I am looking forward to the next five years and seeing what is ahead!

As always, keep the questions and calls coming – 410-917-5189 or e-mail me at spollock@mccdonaldhopkins.com.

Ep. 99 of the Cyber Law Revolution is live!

In this episode, we discuss the importance of a good managed service provider (“MSP”) and how a bad MSP can cripple you. We walk through the different aspects that define both a good and bad MSP. Also, we touch on the recent AWS outage and how we are all dependent on these large cloud-based providers.

Keep the questions, calls, comments, etc. coming – 410-917-5189 or spollock@mcdonaldhopkins.com

Ep. 98 Of the Cyber Law Revolution is live!

In this episode, we discuss Akira campaign against a SonicWall vulnerability and its subsequent rampage and damage caused to companies. Also, we dive into the Drift/Salesforce breach and how companies need to beef up their incident response plans to weather large-scale upstream vendor incidents.

You won’t want to miss it!

Keep the questions, calls, comments, etc. coming – 410-917-5189 or spollock@mcdonaldhopkins.com

Ep. 97 of the Cyber Law Revolution is live!

In this episode, we discuss the unfortunate breach of the Tea App and lessons learned. 

First, update your data retention policy (why are we keeping selfies after verification?!). Second, make sure your scaling your cybersecurity with the size and scope of your company. Finally, your PR/crisis communication strategy is crucial.

Keep the questions, call, comments, etc. coming! 410-917-5189 or spollock@mcdonaldhopkins.com

Ep. 96 of the Cyber Law Revolution is live!

In this episode, we discussed the sophistication of scattered spider as they target the insurance and airplane industries. Further, we do a quick dive into the implications of AI!

Keep the questions and comments coming. 410-917-5189 or spollock@mcdonaldhopkins.com

Ep. 95 of the Cyber Law Revolution is live!

In this episode, thrilled to have Patrick Cannon, chief claims officer from Onda, join the show and discuss his path in cyber, current market conditions, and where he sees the market going over the next 3-5 years.

You won't want to miss it!

Keep the questions, calls, etc. coming - 410-917-5189 or e-mail me at spollock@mcdonaldhopkins.com.

Ep. 94 of the Cyber Law Revolution is live!

In this episode, we discuss the recent Coinbase ransomware attack, the likely cause of the attack, the reputational impact, and how cryptocurrency is the Wild West.

You won’t want to miss it!

Keep the calls, questions, comments, etc. coming – 410-917-5189 or spollock@mcdonaldhopkins.com

Ep. 93 of the Cyber Law Revolution is live!

Thrilled to have David Rock, chief claims officer at Trium, with us to discuss SME v. large enterprise risk, biggest fear from a claims perspective for large enterprise breaches, vendor incidents, and a lot more!

You won’t want to miss his insight!

Keep the questions, calls, comments, etc. coming – 410-917-5189 or spollock@mcdonaldhopkins.com

In this episode, we discuss the value of cyber conferences (shout out to NetDiligence®, Zywave, IAPP, @PLUS, ExecuSummit, and all the others I missed). Beyond the educational sessions, the informal discussions that take place behind the scenes contribute significantly to our understanding of legal, market, and security trends. The collaborations formed, and the authentic connections made within the industry provide invaluable benefits for all attendees.

I can’t neglect a special shout-out to meeting Shawn Melito in a buffet line at a Zywave conference in 2019, discussing the pros and cons of pasta salad. 

Further, we dive into the unforeseen consequences of catastrophic vendor breaches. Is the market ready for a vendor to throw its hands up, declare bankruptcy, and push all notification obligations to its insureds? Is the market ready for the mass-scale class actions that would follow? Do insurers need to start thinking about sublimits for these types of events? 

I would love to get everyone’s thoughts so keep the questions, calls, and comments coming! E-mail me at spollock@mcdonaldhopkins.com or call me at 410-917-5189.

Ep. 91 of the Cyber Law Revolution is live!

In this episode, we discuss the PowerSchool breach, the downstream implications, how organizations should respond, and learning the same lesson over and over again.

Keep the questions, calls, comments, etc. coming - 410-917-5189 or spollock@mcdonaldhopkins.com

Enjoy!

Ep. 90 of the Cyber Law Revolution is live!

In this episode, we discuss two trends we expect to see in 2025 and one we hope to see: AI, regulators leveraging privacy laws for enforcement actions, and someone taking a class action to trial!

Keep the questions, calls, etc. coming - 4109175189 or spollock@mcdonaldhopkins.com

Enjoy!

Episode 89 of the Cyber Law Revolution highlights a crucial shift in mindset regarding how organizations approach relationships in the realm of cybersecurity and privacy. By emphasizing partnerships over traditional vendor or service provider labels, it acknowledges the collaborative effort required to effectively address cyber incidents. 

This perspective likely promotes a more integrated approach, encouraging organizations to share knowledge, resources, and strategies in real-time during a crisis. It’s an important topic, especially as cyber threats continue to evolve.

Keep the questions and calls coming - 410-917-5189 or spollock@mcdonaldhopkins.com

Ep. 88 of the Cyber Law Revolution is live!

In this episode, we explore the strategies for opting in and out of notifications regarding vendor breaches, as well as the intricate relationships between data owners and data maintainers.

Don't miss it!

Keep the questions, calls, comments, etc. coming - 410-917-5189 or spollock@mcdonaldhopkins.com

Ep. 87 of the Cyber Law Revolution is Live!

Thrilled to have Sean Finch, Managing Director of the UK and European Markets at CYPFER, join the show.

Sean drops a ton of knowledge on the difference between the UK and US markets related to incident response, restoration and recovery, ransomware, insurance risk tolerance, and much more!

You don’t want to miss it!

Keep the questions, calls, etc. coming – 4109175189 or spollock@mcdonaldhopkins.com

Episode 86 of the Cyber Law Revolution is live!

In this episode, we discuss the ramifications of the CDK breach, third-party management, and the importance of redundancy!

Keep the questions coming! 4109175189 or spollock@mcdonaldhopkins.com

Ep. 85 of the Cyber Law Revolution is live!

In this episode, Shari Mattis, AVP of claims at ANV, drops by to discuss building a cyber panel, the importance of having that dream team when a claim comes in, what makes an organization attractive for a cyber carrier, and cyber red flags in organizations.

You won't want to miss it!

Keep the questions and calls coming! 410-917-5189 or spollock@mcdonaldhopkins.com

Ep. 84 of the Cyber Law Revolution is live!

Thrilled to have Demi Traikovich of CAC Specialty drop by to discuss her path to cyber insurance, the wholesale and retail market, trends, and coverage issues!

You won't want to miss it!

Keep the questions, calls, comments, etc. coming - 410-917-5189 and spollock@mcdonaldhopkins.com.

Ep. 83 of the Cyber Law Revolution is live! 

In this episode, we dive into the importance and role of breach coaches. We lay out the reasons why you want a breach coach involved the very instant an incident occurs, how we help navigate the situation, and the benefits to our involvement.

I hope this provides some good insight into our day to day!

Keep the questions and calls coming - 410-917-5189 or spollock@mcdonaldhopkins.com

Ep. 82 of the Cyber Law Revolution is live!

In this episode, we do a deep nerdy dive into Maryland's New Data Privacy act, the implications behind, how to comply, and the enforcement mechanisms.

Bottom line: get ahead of the privacy compliance curve!

Keep the questions and calls coming - 410-917-5189 or spollock@mcdonaldhopkins.com

Ep. 81 of the Cyber Law Revolution is live!

In this episode, we discuss the crippling impact of the ransomware attack on Change Health and the downstream implications.

What is the lesson: vendor breaches are not going away, and we must continue our due diligence!

Keep the questions and comments coming! Call me 410-917-5189 or e-mail me at spollock@mcdonaldhopkins.com

Ep. 80 of the Cyber Law Revolution is live!

In this episode, we dive into the FBI's (and our international police partners) takedown of LockBit's webpage and seizure of decryption keys, LockBit's failure to patch, and implications downstream!

You won't want to miss it!

Keep the questions and calls coming. Call me at 410-917-5189 or e-mail me at spollock@mcdonaldhopkins.com

Ep. 79 of the Cyber Law Revolution is live!

In this episode, we discuss 23andMe's novel legal theory regarding recycled usernames and passwords, and its impact on the data breach. Further, we jump into the PR nightmare this position has caused and the potential consequences of such a legal position.

You won't want to miss it!

Keep the questions, calls, and comments coming! Call me at 410-917-5189 or e-mail me at spollock@mcdonaldhopkins.com.

Ep. 78 of the Cyber Law Revolution is live!

Chris Loehr of Solis drops by to discuss what we saw in 2023, provide insight into  what to expect in 2024, and tips for organizations to mitigate the harms of a data breach. You won't want to miss it!

Keep the questions and calls coming! Call me at 410-917-5189 or e-mail at spollock@mcdonaldhopkins.com!

Enjoy!

Ep. 77 of the Cyber Law Revolution is live! 

In this episode, we discuss how China is on the offensive with the cyber war and trying to position itself in our critical infrastructure for future conflicts. 

Scary scenario and one we need to keep a close eye on.

As always, keep the questions, calls, and comments coming - call me at 410-917-5189 or e-mail me at spollock@mcdonaldhopkins.com. 

Enjoy!

Ep. 76 of the Cyber Law Revolution is Live!
 
In this episode, Anthony Hess, CEO and Co-Owner of Asceris, drops by to discuss the differences in the DFIR and insurance world when comparing the US to the UK, along with lots of great insight into the industry!
 
Keep the questions and calls coming - 410-917-5189 or spollock@mcdonaldhopkins.com.
 
Enjoy!

Ep. 75 of the Cyber Law Revolution is live!
 
In this episode, we discuss the Video Privacy Protection Act and other privacy laws and how plaintiff attorneys are using these old privacy laws to bring new lawsuits based on the emerging website tracking technologies. 
 
Keep the questions, calls, and comments coming - 410-917-5189 or spollock@mcdonaldhopkins.com
 
Enjoy!

Ep. 74 of the Cyber Law Revolution is live!

In this episode, we discuss the attacks against MGM and Caesars, the different approaches both took to response, the implications, and the lessons we learn.

I will give you a hint: prepare, prepare, prepare!

Keep the questions and calls coming! 410-917-5189 or spollock@mcdonaldhopkins.com

Ep. 74 of the Cyber Law Revolution is live!
 
In light of MoveIT, we revisit the importance of developing and testing an incident response plan and performing vendor due diligence in this episode.
 
We discuss how organizations need to go a step further and ask, "Who are the friends of our friends." Specifically, who are our vendors working with, and what due diligence is being done to ensure our information is secure?
 
Keep the questions and calls coming! Call me at 410-917-5189 or e-mail me at spollock@mcdonaldhopkins.com.

Ep. 73 of the Cyber Law Revolution is live!
 
 We are thrilled to have Larry Baldino, President of Cyber, Technology, and Professional Liability at Dual Commercial, on the show. 
 
 In this episode, Larry brings his industry knowledge regarding the importance of cultivating trust with insureds before an incident, the future of the cyber market, and what SMBs need to be thinking about regarding cyber hygiene.
 
 You won't want to miss it!
 
 Keep the questions, comments, etc. coming! Call me at 410-917-5189 or e-mail me at spollock@mcdonaldhopkins.com. 

Ep. 72 of the Cyber Law Revolution Podcast is live!
 
 In this episode, we are joined by Perry Tsao, head of claims, and Rueben Medina, head of security of Elpha Secure, to talk about the benefits of working with your insurer to see behind the “iceberg” and get better protected. 

You won’t want to miss it!

Keep the questions and calls coming. Call me at 410-917-5189 or e-mail me at spollock@mcdonaldhopkins.com.

Ep. 71 of the Cyber Law Revolution is live!

I am thrilled to have Margaux Weinraub of Graham Company and Alexandra Bretschneider of Johnson, Kendall, & Johnson join the Show!
 
Margaux and Alexandra provide deep insight into the role of a cyber broker, the current state of the market, the war exclusion, and how to become insurable. 
 
You won't want to miss it!
 
Keep the questions and calls coming. 410-917-5189 or spollock@mcdonaldhopkins.com

Ep. 70 of the Cyber Law Revolution Podcast is live!
 
 ALERT ALERT ALERT
 
 In this episode, we discuss the how MoveIT experienced a zero-day vulnerability attack and the steps companies need to take NOW to protect themselves!
 
 Specifically, if you use MoveIT:
 1. Implement the patch or mitigation.

 2. Contact your cyber insurer and or a breach coach (especially if you do not have cyber insurance).

 3. Utilizing your cyber insurer or breach coach, start a forensic investigation to determine the scope and extent of the impact to your organization, and potential notification obligations.
 
 Act now to protect yourselves!
 
 Call or e-mail me with questions or to discuss how we can assist. Call me at 410-917-5189 or e-mail me at spollock@mcdonaldhopkins.com

Ep. 69 of the Cyber Law Revolution is live!

In this episode, we dive into the DOJ and the FBI placing a bounty on the central figure beyond the development and deployment of the Hive, LockBit, and Babuk ransomware variants. We also discuss how this further demonstrates close cooperation between these groups.

Keep those questions, calls, comments, etc. coming – 410-917-5189 or spollock@mcdonaldhopkins.com

Ep. 68 of the Cyber Law Revolution is live!
 
 In this episode, we discuss the good and bad of media coverage during and after a cyber incident or data breach. Specifically, we dive into how the media helps push out information and can also be a tool for the threat actors and cyber criminals to extort further companies, hospitals, schools, non-profits, etc. 
 
 You won't want to miss it!
 
 Keep the questions and calls coming - 410-917-5189 or spollock@mcdonaldhopkins.com

Ep. 67 of the Cyber Law Revolution is live!

In this episode, we discuss HHS and OCR shifting resources to handle the influx of complaint under HIPAA and HITECH, and what this means for organizations subject to these acts!

Keep the questions, calls, comments, etc. coming - 410-917-5189 or spollock@mcdonaldhopkins.com.

Ep. 66 of the Cyber Law Revolution is live!

In this episode, we continue our conversation about data breach class action lawsuits and how they have become widespread and rampant. 

You won't want to miss it!

Keep the calls and questions coming - 410-917-5189 or spollock@mcdonaldhopkins.com

Ep. 64 of the Cyber Law Revolution Podcast is live!

In this episode, we discuss the FBI’s takedown of the Hive’s website and the new privacy and cybersecurity laws coming out in 2023!

Keep those questions and comments coming! Call me at 410-917-5189 or e-mail me at spollock@mcdonaldhopkins.com!

Enjoy!

Ep. 64 of the Cyber Law Revolution Podcast is live!

In this episode, we dive into India's amended data protection law, the 6 hour reporting requirement, and the expansive scope of the law.

You won't want to miss it!

Enjoy!

Ep. 63 of the Cyber Law Revolution is live! 
 
In this episode, Sean Bowen, Esq., from McDonald Hopkins, joins the show to discuss pixels, why they are forefront in the privacy realm, and the recent HHS/OCR guidance.
 
Trust me, you don't want to miss it!
 
Keep the questions, calls, etc., coming. Call me at 410-917-5189 or e-mail me at spollock@mcdonaldhopkins.com.

Episode 62 of the Cyber Law Revolution is live!

We do a joint episode with Felicia King and Breakfast Bytes. In the episode we dive into current trends, what to expect moving forward, and third-party risk management!

Keep the questions and calls coming! 410-917-5189 or spollock@mcdonaldhopkins.com

Enjoy!

Ep. 61 of the Cyber Law Revolution is live!

THE INVASION OF THE MCDONALD HOPKINS DP TEAM (or at least some of them!)! 

In this episode, we are joined by Sanjana Palla, Kelly Campbell, Heather Shumaker, Stephen Robison, and Meghan Collins, all cybersecurity and privacy attorneys at McDonald Hopkins! 

Each provides inside information on why they decided to pursue a career in cyber and privacy law, how they got into the area, and advise to new attorneys looking to break into the field!

Keep the questions and comments coming! 410-917-5189 or spollock@mcdonaldhopkins.com

Ep. 60 of the Cyber Law Revolution is live!

Thrilled to have Linda Comerford, AVP of Cyber Services and Incident Response at AmTrust, joins the show to talk about the claims process, how to become a more attractive insured, and common missteps during a cyber claim!

You won't want to miss it!

Keep the questions and calls coming! 410-917-5189 or spollock@mcdonaldhopkins.com

Ep. 59 of the Cyber Law Revolution is live!

In this episode, we dive into the FBI's IC3 2021 report and discuss the trends that the FBI found in 2021 related to cybercrime.

Some great insight and facts that you won't want to miss!

Keep the questions and calls coming! Call me at 410-917-5189 or e-mail me at spollock@mcdonaldhopkins.com.

Ep. 58 of the Cyber Law Revolution is live!

ALERT! Microsoft just announced two new zero day vulnerabilities!

Buckle up and get a head of the threat!

Prepare, Prepare, Prepare!

Keep the questions, calls, comments coming - call me at 410-917-5189 or e-mail me at spollock@mcdonaldhopkins.com.

Enjoy!

Ep. 57 of the Cyber Law Revolution is live.

In this episode, we dive into the importance of performing cyber and privacy due diligence related to M and A transactions.

This is an emerging and important area of M and A law that we will continue to see impact deals in the future!

As always, keep those questions and calls coming. Call me at 410-917-5189 or e-mail at spollock@mcdonaldhopkins.com. 

Enjoy!

Ep. 56 of the Cyber Law Revolution is live!

In this episode, we discuss Lockbit getting hit by a DDoS attack, the potential legal implications of the group launching the attack against Lockbit, and Lockbit incorporating DDoS attacks into their arsenal!

Great stuff that you won’t want to miss! 

Keep the questions, calls, and comments coming –410-917-5189, spollock@mcdonaldhopkins.com, or comment below!

Feel free to recommend future topics!

Enjoy!

Ep. 55 of the Cyber Law Revolution Podcast is live!

Cybersecurity, data security, and privacy laws are the fast-moving and evolving regulations in the country. 

Don’t blink, or you will miss an amendment or change existing law. 

The NYDFS demonstrated just that in a recent draft amendment to its already strict cybersecurity law. 

In this episode, we do a nerdy dive into the new proposed amendments.

Feel free to call (410-917-5189), e-mail (spollock@mcdonaldhopkins.com), or comment below!

Ep. 54 of the Cyber Law Revolution is live!

In this episode, we discuss the potential advent of a federal privacy law - the American Data Privacy and Protection Act (ADPPA) - and its impact on nationwide privacy standards.

Also, we dive into Florida banning ransom payments for public entities.

You won't want to miss it! 

Keep those questions, calls, comments, etc. coming - 410-917-5189, spollock@mcdonaldhopkins.com, or comment below.

Ep. 53 of the Cyber Law Revolution Podcast is live!

In this episode, we discuss Lockbit 3.0's new bug bounty program and how they love to exploit greedy humans.

Also, we dive into Marriott's newest data breach.

You don't want to miss it....do you ever want to miss this podcast though?! ;) 

Ep. 52 of the Cyber Law Revolution Podcast is live!

In this episode, we dive into the recent consent enforcement action by the NYDFS against Carnival Cruises and its subsidiaries.

Let me tell you, this consent action was no joke, and the NYDFS hammered Carnival on deficiencies related to cybersecurity and compliance.

Tune in to understand the practical effects of this decision. 

Keep those questions, calls, and comments coming (comment below!)...410-917-5189 or spollock@mcdonaldhopkins.com

Ep. 50 of the Cyber Law Revolution Podcast is live!

In this episode, we dive into cloud based incident response and how it presents new challenges compared to traditional incident response.

Also, we touch on Indiana's new amended data breach notification law. 

You don't want to miss it!

Ep. 49 of the Cyber Law Revolution is live!

In this episode, I discuss the recent data breach with the Texas Department of Insurance and its widespread implications.

Also, I dive into the cyber compliance vulnerabilities with medical institutions. Enjoy!

Ep. 48 of the Cyber Law Revolution podcast is live!

In this episode, we discuss the resurgence of the notorious ransomware group, REvil, the broader implications of their reappearance, and how to defend ourselves against such groups proactively.

Keep those questions, calls, comments coming - 410-917-5189 or spollock@mcdonaldhopkins.com

Ep. 47 of the Cyber Law Revolution Podcast is live!

In this episode, we delve into my position on data breach class action lawsuits. Specifically:
Who is actually getting paid or compensated (hint: it is not the people allegedly injured)?

Why are they getting compensated?

Why are speculative damages acceptable?

Are these class actions causing more harm than good?

You won't want to miss it!

Keep the questions/calls/comments coming!
410-917-5189 or spollock@mcdonaldhopkins.com

Ep. 46 of the Cyber Law Revolution is live!
 
 Pleased to have Felicia King, Security Architect and Information Security Officer, from QPC Security on the show!
 
 Felicia turns the tables on me and puts me on the spot to talk about the importance and role of a breach coach, how we all work as a team, and preparation preparation preparation!
 
 Keeps the questions, calls, comments, etc. coming. Call me at 410-917-5189 or email me spollock@wtplaw.com
 
 Enjoy!

Ep. 45 of the Cyber Law Revolution is live!
  
  Pleased to have Chris Loehr, EVP, and CTO, of Solis Security, back on to talk about the cyber ripple impact caused by the Russian invasion of Ukraine, Conti's internal chat logs and leaks, and the corporate infrastructure of ransomware groups.
  
  Great stuff! 
  
  Keep the questions, comments, etc., coming by calling me (410-917-5189), emailing me at spollock@wtplaw.com, or commenting below!

Episode 44 of the Cyber Law Revolution Podcast is live!
 
 In this episode, we discuss the cyber threats likely to come from the Russian invasion of Ukraine and how we can "shield up" to protect ourselves.
 
 Also, we dive into new privacy laws and their impact on commercial entities.
 
 Call or email me with questions/comments/etc. - 410-832-2002 or spollock@wtplaw.com - or comment below.
 
 Enjoy!

Ep. 43 of the Cyber Law Revolution Podcast is live!
 
 In this episode, we talk about the recent report published by Coveware detailing the data breach and cyber-attack statistics from the Q4 in 2021. 
 
 Lots of interesting details and new information that you won't want to miss!
 
 Keep the questions, calls, comments, etc. coming - call me at 410-832-2002 or email me at spollock@wtplaw.com
 
 Enjoy!

Ep. 42 of the Cyber Law Revolution is live!
 
 In this episode, Patrick Costello, co-founder of Evolve MGA, joins the show and provides the listeners incredible insight into cyber insurance trends, becoming attractive to cyber insurers in a challenging marketplace, and the role of an MGA. 
 
 You won't want to miss it!
 
 Keep the questions, calls, comments, etc., coming - either comment below, call me at 410-832-2002, or email me at spollock@wtplaw.com.
 
 Enjoy!

Ep. 41 of the Cyber Law Revolution is live!

In this episode, we discuss what we saw in 2021 and what we should expect to see in 2022. Comment below or call or email me - 410-832-2002 or spollock@wtplaw.com.

Enjoy!

Ep. 40 of the Cyber Law Revolution is live!

On this episode, we discuss the joys of HIPAA compliance (yay!) and how to navigate OCR's wrath by checking the safeguard boxes: administrative, physical, and technical (I wish it was as easy as it sounds).

Keep the questions, calls, comments coming! 410-832-2002 or spollock@wtplaw.com

Enjoy!

Ep. 39 of the Cyber Law Revolution Podcast is live!
 
 Thanks to Neel Desai from Lockton Companies for joining the show to discuss the rocky state of the market, how companies can become attractive prospects in the market, and common missteps they make when trying to get cyber insurance. 
 
 Keep the questions, comments, calls, etc., coming! 
 
 410-832-2002 or spollock@wtplaw.com

Ep. 38 of the Cyber Law Revolution is live!

Andrew Morgan from Cyber Nation joins the show to discuss the role MSPs serve businesses, how they help them prepare for, respond to, and remediate after a breach, and sheds some insight into best practices for an MSP. Enjoy!

Episode 37 of the Cyber Law Revolution Podcast is live!
 
 In this episode, we discuss the purpose and importance of cyber and privacy laws related to individuals (i.e., customers, clients, consumers, employees, and everything in between) along with a unique approach to dealing with a ransomware attack.

 As always, call, email, or comment below with questions or discussion points - 4108322002 or spollock@wtplaw.com
 
 Enjoy!

Episode 36 of the Cyber Law Revolution Podcast is live!
 
Thanks to Kathleen Curley from Risk Strategies for joining us to discuss cyber market trends, where the market is going, and tips for SMBs to become attractive to insurers!
 
As always, call, email, or comment below with questions or discussion points - 4108322002 or spollock@wtplaw.com
 
Enjoy!

Ep. 35 of the Cyber Law Revolution Podcast is live!
 
 In this episode, we discuss how the ransomware group, Blackmatter, opted to redefine "critical infrastructure" and the potential impact of the US Dept. of Treasury placing Suex, a cryptocurrency exchange service, on the sanctions list.
 
 Feel free to comment below or call or email me with questions/comments/future topics - 410-832-2002 or spollock@wtplaw.com.
 
 Enjoy!

Episode 34 of the Cyber Law Revolution Podcast is live!

In this episode, I discuss how the Court continues to whittle down the protections provided by the work product doctrine and potential ways to strengthen it moving forward.

A nerdy deep dive into the law! Call me with questions, comments, or topics to discuss - 410-917-5189 or spollock@wtplaw.com

Episode 33 of the Cyber Law Revolution Podcast is live!
 
 In this episode, I discuss how the uncertainty and lack of precedent behind cyber laws have created rampant regulatory overreach and classic "big government" (swear not being political!), which is unfair, unjust, and inflicting more harm than good.

 Also, we dive into those first critical steps to take after a ransomware attack. 
 
 You don't want to miss it! Call me with questions, comments, or topics to discuss - 410-917-5189 or spollock@wtplaw.com

Episode 32 of the Cyber Law Revolution is live! We are pleased to have Joshua Arnold from Hiscox on the show to dive into how he got into cyber insurance, the essentials of cyber claim management, and what is on the horizon moving forward. You don't want to miss it! Enjoy!

Episode 31 of the Cyber Law Revolution podcast is live! This episode discusses a recent federal court decision that further eroded the work product doctrine and protected a forensic report after a data breach. A worrisome trend for companies suffering a breach and creating further headaches for breach coaches! Continue to send those questions by calling or emailing me - 410-832-2002 or spollock@wtplaw.com. Enjoy!

Ep. 30 of the Cyber Law Revolution Podcast is live! On this episode, Chris Loehr from Solis Security joins us to discuss the current state of ransomware, the potential of private companies launching counter cyber strikes, and what the government should be doing to combat these criminals. Feel free to post comments or questions below. Enjoy!

Episode 29 of the Cyber Law Revolution is live! In this episode, we tackle the implications of the Kaseya mega cyber attack and the Biden Administration's new initiative to tackle ransomware (hint: it does not go far enough). Feel free to email to discuss - spollock@wtplaw.com. Enjoy!

Ep. 28 is live! This week the Supreme Court curbed the ability of an individual’s ability to bring a lawsuit after a data breach. Why? Lack of standing and the inability to prove damages. We dive into that topic and explain all the fun legal aspects associated with it. Enjoy!!

In this episode, we talk about President Biden's disappointing "red lines" with Russia and ransomware groups, along with the implications of the Colorado Privacy Act and what comes next. Enjoy!

Another day, another ransomware attack. In this episode, we discuss the ransomware attack on JBS, our continued vulnerability to these ransomware hackers, and the need to take decisive action to turn the tide. Also, we touch on the practical aspects of negotiating with these hackers. Enjoy! 

We couldn't stop with one episode discussing the Colonial Pipeline incident because the implications and ripple effects are too important. Specifically, the response from the US Government and the hackers in the immediate aftermath of the attack was telling and likely foreshadows what is to come. Enjoy!

In this episode, we discuss how hackers escalated the cyberwar after attacking Colonial Pipeline and the seriousness of this incident. The assault on a critical piece of our infrastructure is frightening and leaves many unanswered questions. Also, we discuss the implications of AXA's opting out of providing ransomware insurance coverage in France and what happens next. Reach out with questions or discuss further - 443-381-3585 - or comment below!

Let's get nerdy and dive into Virginia's new consumer data protection law! Individual's ability to control how their information is used is coming to a state near you. Virginia is the second in the country, behind California, to enact a stringent privacy law that companies need to understand what is required to and the implications of failing to comply. Now is the time to get ahead of the coming state privacy law wave! 

This episode dives into how transatlantic cybersecurity cooperation is crucial in defending ourselves in this cyberwar. However, this puts the cart before the horse. Specifically, we need a defined and uniform federal cybersecurity/privacy law to allow companies to understand and comply with one set of obligations. This would enable companies to focus on best practices and defense rather than constantly worrying about the continually evolving and changing cyber/privacy laws. Enjoy, comment, discuss, and feel free to send in questions!

After a data breach or ransomware attack, companies face two means of exposure and embarrassment via public websites: one run by the hackers and one run by the government. 
 
 In this episode, we discuss these name and shame sites' dual nature and a better approach the government should take when informing the public about a company's suffering a data breach.

Unfortunately, data breaches don't end after the forensic and legal investigation and analysis concludes. At that point, companies have to dig through every document involved, figure out the individuals named and information contained in each, print and mail the notice letters, provide credit monitoring, and potentially staff a call center to handle inquiries. It is a daunting task, but we discuss how to incorporate the necessary firms to streamline the process to get you back to doing what you do best: servicing your clients.

On this episode we discuss the Microsoft and CNA hack, the implications of both, and a brief look into the new privacy laws on the horizon.

We are pleased to have Stephen Bedosky from York International on the show to discuss cyber risks in non-traditional markets along with the importance of pre-breach risk mitigation services. Enjoy!

Ep. 17 of the Cyber Law Revolution is live!

Very excited to have Austin Morris, Jr. from Morris Risk Management, LLC on the show to discuss the intersection between risk management and cybersecurity and emerging cyber issues threatening both the public and private sectors. Enjoy!

As they say in a “Few Good Men,” Cyber attorneys: the ones you want and need on that wall (granted, I took some liberties with the exact wording of the statement!)! 

In this episode, we dive into the importance of retaining a cyber attorney before a breach and having the attorney written into your cyber policy. We explain how companies with pre-existing relationships with cyber attorneys are better positioned to respond and mitigate the harms of a data breach effectively. Also, we discuss how a company can get their cyber attorney written into their insurance policy as the approved “breach coach.” Feel free to call (443-381-3586) or email me at sspollock@nilesbarton.com with questions or comments. Enjoy!

Come listen to one of the proverbial godfathers of cyber insurance, Bob Parisi,  Head of Cyber-North America at Munich Re, as he explains the product's rapid evolution. Bob provides a deep dive into where we started, where we are, and where we are going. You won't want to miss this! 

In this episode, we dive into the thrilling topic of contractually obligating your external vendors to have the legally required cyber safeguards in place. We discuss the reasons behind needing these provisions and critical clauses to ensure are in the contracts. Enjoy!

Thrilled to have Sean Clifford, VP of cyber and tech insurance at Berkshire Hathaway Specialty Insurance, on the Cyber Law Revolution podcast to discuss the world of complex cyber insurance underwriting‬, the impact of SolarWinds, and the current regulatory environment. You won’t want to miss it!

In this episode we discuss two recent cybersecurity wins by the government against hackers, and the always exciting topic of new potential cyber and privacy laws in 2021!

On this episode, Chris Freedman from OnDefend joins the show to discuss the anatomy of a ransomware attack and offer insight on how to prepare for and weather the storm when it hits!

The importance of effective communication and messaging during a breach cannot be overstated. The words we use and the message we relate to our employees, clients, and government during a breach can escalate the ramifications to extreme levels. In this episode, we have FTI Consulting's senior manager and leader of their cybersecurity and data privacy communications practice, Meredith Griffanti, to discuss how to manage internal and external communications before, during, and after a breach. You don't want to miss it!

One overlooked but critical aspects of dealing with a data breach is the notification process. Specifically, every state has a data breach law in the US, which creates a maze of unique obligations for companies to confront after a data breach. This episode will help unpack and provide a better understanding of the multi-state data breach notification process!

Welcome to 2021! The cyber law revolution continues! What did we learn in 2020? What should we expect to see in 2021? This episode will review the past year and discuss the future!

Hackers want to exploit our vulnerabilities. They know that schools hold sensitive information about our children, which makes schools a prime target for hackers. Unfortunately, there is a public misconception about the threat schools face, what department shoulders the compliance burden, and what cyber laws apply. Schools need to meet these misconceptions head on and make the necessary changes to protect themselves and become legally compliant.

Yes another discussion about Ransomware! However, I can promise listening to this episode will give you a deeper insight into the key aspects you need to consider before an attack occurs!

Tony Cañas from Insurance Nerds joins Spencer to discuss how he sees the cyber insurance market's future, developing and engaging the next generation to get them involved in cyber insurance, and how we diversify the industry. You won't want to miss this engaging and insightful conversation!

Ever wonder what you need to do when a hacker strikes? Are you asking yourself "what exactly does a cyber attorney do"? If so, I can promise you that this podcast will help solve those mysteries!

Working with external vendors made doing business more profitable, efficient, and practical. However, we need to recognize how vulnerable our organizations became when we moved to this decentralized way of life and the steps we need to take to become more secure.

This episode will give you an overview of the complexity of cyber laws and an idea of how you can start getting compliant!

Welcome to the Cyber War. We face an existential threat from an unrelating sophisticated enemy: hackers. We are losing this war. They are playing chess, and we are playing checkers. However, we can win the war! This episode discusses how we will take the fight to the hackers, gives an overview of what is to come, and lays the foundation for practical steps when dealing with cyber law!