Michelle A. ReedMichelle A.Reed

An online retailer in a data breach affecting 50 states and 16 countries; assisting with the identification of the nature and scope of the intrusion; working with the information technology team and experts to restore normal system operation; providing customer notification and call center management, states’ regulatory negotiations, discussions with PCI-DSS council and payment card issuers, and public relations communications.

Led investigation of a ransomware attack by an advanced persistent threat actor, retaining forensic investigators, recovery and restoration service, and public relations consultants, ensuring OFAC compliance, advising on SEC cyber disclosures, facilitating communications with auditors, communicating with law enforcement and providing notification to approximately 16 million individuals and 52 different regulators.

Clients in a broad array of regulatory cyber investigations, including FTC, SEC, FCC, CFPB, HHS and others.

Top-10 U.S. city in ransomware incident impacting city employees and residents, advising on legal obligations, notifications, regulatory discussions and strategic communications.

A multistate hospital system in a data breach by a third-party vendor affecting nearly four million patients nationwide; counseling on notification obligations to patients and regulators and multidistrict litigation.

An online retailer in responding to an aggressive attack, guiding the company through its investigation, retaining forensic experts, coordinating with law enforcement and resolving the breach with minimal exposure to the company.

Counseling a retailer with more than half a billion dollars in annual sales in all phases of an unauthorized intrusion into its network, interfacing with the Federal Bureau of Investigation (FBI) and identifying internal control improvements.

Numerous companies in defending against claims asserted under federal and state anti-wiretapping laws, including the California Invasion of Privacy and the Wiretapping and Electronic Surveillance Control Act.

A 14-hospital health system that included clinics, home health services and doctors serving Indiana and Illinois, advising them on data breach response, data breach litigation and state attorney general enforcement.

A communications and media company in consolidated putative class actions alleging claims for negligence, negligence per se, breach of implied contract, violation of the New York Labor Law and violation of the Cable Communications Act arising from a data security incident involving the personal data of current and former employees.

Client in consolidated putative class actions arising from data breach involving the alleged exposure of personally identifiable information and asserting common law tort claims, as well as New York and California statutory claims, including claims under the California Consumer Privacy Act (CCPA), and obtained a full dismissal at the district court level of all claims.

Client in a putative class action arising from a data breach at a third-party service provider involving alleged claims for negligence, negligence per se, breach of confidence, breach of implied contract, breach of fiduciary duty and violation of the state consumer protection act.

A guardrail manufacturer in two consumer class actions in the Western District of Wisconsin and Southern District of Illinois alleging fraud, breach of warranty and contract, unjust enrichment and violations of the Deceptive Trade Practices Act.

Defeated class certification in a federal securities class action, using expert testimony to rebut predominance under Rule 23(b)(3).

Obtained a favorable settlement within insurance limits in a derivative suit against directors of a publicly traded energy company alleging claims of breach of fiduciary duty and unjust enrichment.

Secured a complete dismissal of fiduciary duty claims alleged against directors of a publicly traded company in federal court in Texas.