Cybersecurity “Flash” Warning for Construction and Manufacturing Businesses
April 05, 2021 —
Jeffrey M. Dennis - Newmeyer DillionOn March 23, 2021, the FBI’s Cyber Division issued a “Flash” warning for several business sectors, including industrial, commercial, manufacturing and construction businesses. The FBI is warning that a strain of ransomware, known as “Mamba,” has been used to weaponize a widely-used encryption software known as DiskCryptor. Mamba works through the open-source DiskCryptor program to encrypt a company’s operating system and demand ransom payment. This new ransomware attack is a threat to any business which employs DiskCryptor, specifically manufacturing and construction companies.
What Should I Do?
If your company utilizes DiskCryptor, the FBI suggests a number of recommendations to mitigate and ward off any ransomware attack. Most of these suggestions fall within the guidelines of proper cyber hygiene, and include (but are not limited to) the following:
- Regularly back up data, as well as copies of data;
- Segment your network;
- Request administrator credentials to install software;
Read the court decisionRead the full story...Reprinted courtesy of
Jeffrey M. Dennis, Newmeyer DillionMr. Dennis may be contacted at
jeff.dennis@ndlf.com
The "Dark Overlord" Strikes The Practice Of Law: What Law Firms Can Do To Protect Themselves
April 17, 2019 —
Ivo G. Danielle – Newmeyer & DillionCybersecurity breaches involving law firms are on the rise with each passing year. Law firms are prime targets for cyber criminals seeking confidential and sensitive information because of the various types of legal work that law firms normally handle for their clients. Whether it be mergers and acquisitions, the use of intellectual property, purchase agreements, bankruptcy or even litigation involving divorce, law firms are a rich depository for highly confidential and sensitive information. As a result, law firms must employ comprehensive security measures to protect themselves from security breaches or risk being on the losing end of a costly malpractice claim, and suffer severe reputational harm.
Law Firms Continue To Be Targeted By Cybercriminals
According to the American Bar Association ("ABA") 2018 Legal Technology Survey Report, 23% of the law firms who participated in the survey reported that their law firm experienced a data breach. Although this may be just a 1% increase from the 22% who reported a breach in 2017, it is important to understand that this is an increase of 8% from the stable percentages reported from 2013 through 2016.1 The 2018 survey report also revealed that security breaches fluctuated with firm size – 14% for solo law firms, 24% for firms employing 2-9 attorneys, approximately 24% for firms with 10-49 attorneys, 42% for firms with 50-99 attorneys, and approximately 31% for those firms employing 100 or more attorneys.
Latest Law Firm Security Breaches
The notorious criminal group called "The Dark Overlord" has a history of committing data breaches of high profile companies such as Gorilla Glue, Netflix, Larson Studios, multiple healthcare companies, and Little Red Door Cancer Agency. Their goal is simple – steal sensitive information and then extort payment from the victims by threatening to release the sensitive information to the public.
On December 31, 2018, this cybercriminal group announced to the world that they had acquired 18,000 documents containing highly sensitive legal information related to insurance based litigation connected to the 9/11 tragedy. The stolen information was the attorney/client property of Lloyd's of London, Silverstein Properties, and Hiscox Syndicates, Ltd. In its announcement, The Dark Overlord boasted that they were in possession of client sensitive information, such as: "emails; retainer agreements; non-disclosure agreements; settlements, litigation strategies; liability analysis; defense formation; collection of expert witness testimonies; communication with government officials in countries all over the world; voice mails; dealings with the FBI, USDOJ, DOD, confidential communications, and so much more."
Subsequent to the data breach, The Dark Overlord announced to the public that they designed a compensation plan that would allow for public crowd-funding for its organization to permit the public to view the stolen information in exchange for bitcoin payment. The more public funding it receives, the more stolen sensitive information will be unlocked and released to the public. It is estimated that this cybercriminal group already distributed information to the public on two separate occasions during the month of January 2019.
High profile cybersecurity breaches of law firms is nothing new – for example, the infamous Panama Papers breach, where cybercriminals leaked 11.5 million documents exposing the shadowy business of setting up offshore corporations as tax shelters for businesses, celebrities, and politicians - and the infamous Petya Malware attack which resulted in a digital lockdown of one of the world's largest law firms, DLA Piper. However, despite the infrequency of publicized cyber-attacks of law firms by the media, the FBI has recently announced that law firms should expect an increase in security attacks by cybercriminals because law firms are now viewed as "one-stop shops" for cybercriminals. Therefore, in order to combat the inevitable increase in cyber-attacks, law firms must get prepared.
How Law Firms Can Protect Themselves
All law firms will agree that the most serious consequence of a security breach for their firm would be the unauthorized access to sensitive client data. The American Bar Association's Model Rules of Professional Conduct, specifically Rules 1.1 and 1.62 and related Comments, require an attorney to take competent and reasonable measures to safeguard information relating to their clients. This duty to "safeguard' information imposes a significant challenge to firms when using technology in connection with protecting client information because most law firms are not savvy with technology and lack proper cyber security training.
In order for a law firm to protect itself from security breaches and inadvertently violate its duty of safeguarding a client's sensitive information, it is important to take the following actions:
- Start by taking an inventory and risk assessment of the firm to determine what needs to be protected – the inventory should include both technology and data;
- Develop, implement and maintain an appropriate cybersecurity program that complies with applicable ethical and legal obligations;
- Ensure the cybersecurity program addresses people, policies and procedures, and technology. The cybersecurity program must designate an individual or a group to be in charge and coordinate security;
- Develop an incident response plan scaled to the size of the firm;
- Continually train staff and attorneys to identify and understand potential cybersecurity threats;
- Consider implementing a third-party assessment of firm's cybersecurity program and policies;
- Purchase cyber liability for insurance which not only covers first party losses to law firms (like lost productivity, data restoration, and legal expenses) but also liability protection to third parties;
- Implement authentication and access controls for network, computers and mobile devices used by the firm's staff and attorneys;
- Consider the use of full-drive encryption for computers and mobile devices;
- Have staff and attorneys avoid and/or limit the use of public WiFi when working remotely; and
- Create a disaster recovery plan to backup all data in the event of a cyber-attack or natural catastrophe.
Continually reviewing, implementing, training and updating a firm's cybersecurity program and protocols will help safeguard sensitive and confidential client information and/or data. No law firm wants to be the next data breach headline – so take the necessary steps to avoid a potential disaster.
1 Past ABA Legal Technology Surveys reported 14% in 2016, 15% in 2015, 14% in 2014 and 15% in 2013.
2 On November 1, 2018, California adopted ethics rules patterned after the ABA Model Rules of Professional Conduct.
Ivo Daniele is a seasoned associate in Newmeyer & Dillion's Walnut Creek office. His practice includes representing private and public companies with both their transactional and litigation needs. You can reach Ivo at ivo.daniele@ndlf.com.
About Newmeyer & Dillion
For almost 35 years, Newmeyer & Dillion has delivered creative and outstanding legal solutions and trial results for a wide array of clients. With over 70 attorneys practicing in all aspects of business law, privacy & data security, employment, real estate, construction, insurance law and trial work, Newmeyer & Dillion delivers legal services tailored to meet each client's needs. Headquartered in Newport Beach, California, with offices in Walnut Creek, California and Las Vegas, Nevada, Newmeyer & Dillion attorneys are recognized by The Best Lawyers in America©, and Super Lawyers as top tier and some of the best lawyers in California, and have been given Martindale-Hubbell Peer Review's AV Preeminent® highest rating. For additional information, call 949.854.7000 or visit www.ndlf.com.
Read the court decisionRead the full story...Reprinted courtesy of
Natural Disasters’ Impact on Construction in the United States
December 14, 2020 —
Robert S. Peckar & Crystal T. Dang - Construction ExecutiveIn these times of easy and instant access to news from around the globe, the effects of major earthquakes in Indonesia and Mexico, cyclones in Southeast Asia, Tsunamis around the world, volcanoes in Europe in unexpected places and, of course, raging forest fires and hurricanes in the United States are frequently in the news. Accompanying each of these disasters are immediate threats to construction projects, both physical and those affecting the safety and health of personnel.
However, after the dust settles or the waters recede, myriad issues will become obstacles to the road to recovery for a contractor to navigate. In 2020 alone, the volume of strong storms and forest fires have focused so much attention on the impact of disasters. The purpose of this article is to provide guidelines in anticipation of disasters, for reviewing the impact of a disaster as it is happening, and developing a mitigation plan to limit losses.
Anticipating Disasters
The best time to prepare for a disaster on a project is before the project starts. Reviewing contract rights, insurance policies and company disaster response protocols while a category 3 hurricane is a day away is not a best practice. To avoid falling into that situation, a contractor should follow the following guidelines. Doing so facilitates proper action during the actual disaster itself and in the aftermath.
Reprinted courtesy of
Robert S. Peckar & Crystal T. Dang, Construction Executive, a publication of Associated Builders and Contractors. All rights reserved.
Mr. Peckar may be contacted at rpeckar@pecklaw.com
Ms. Dang may be contacted at cdang@pecklaw.com
Read the court decisionRead the full story...Reprinted courtesy of
Construction Legislation Likely to Take Effect July 1, 2020
April 27, 2020 —
Christopher G. Hill - Construction Law MusingsCoronavirus is dominating the news and planning for the effects of COVID-19 is a big deal for construction companies in the Commonwealth. However, these issues, though immediate, are not the only ones that have popped up here at the beginning of 2020. Several bills that I have been monitoring (here and here) have recently passed both the House of Delegates and the Virginia Senate and are on their way to the Governor for signature (a signature that is most likely going to happen in each case).
Among those bills that did not pass are a bill that would have eliminated right to work in Virginia and allowed so called “closed shops” as well as fair share fees legislation that would have required those that were not part of a union to pay certain portions of union expenses.
Read the court decisionRead the full story...Reprinted courtesy of
The Law Office of Christopher G. HillMr. Hill may be contacted at
chrisghill@constructionlawva.com
Supreme Court Holds Arbitrator can Fully Decide Threshold Arbitrability Issue
March 18, 2019 —
David Adelstein - Florida Construction Legal UpdatesThe United States Supreme Court recently decided parties to a contract can agree, under the Federal Arbitration Act, an arbitrator, rather than a court, can fully resolve the initial arbitrability question. Henry Schein, Inc. v. Archer and White Sales, Inc., 2019 WL 122164 (2019). The arbitrability question is whether the dispute itself is subject to arbitration under an arbitration provision. Parties that do not want to arbitrate try to circumvent this process by filing a lawsuit and asking the court to determine the threshold arbitrability question.
In Henry Schein, Inc., the contract at-issue provided:
This Agreement shall be governed by the laws of the State of North Carolina. Any dispute arising under or related to this Agreement (except for actions seeking injunctive relief and disputes related to trademarks, trade secrets, or other intellectual property) shall be resolved by binding arbitration in accordance with the arbitration rules of the American Arbitration Association. The place of arbitration shall be in Charlotte, North Carolina.
The plaintiff in this case asserted a claim for injunctive relief (among other claims) and argued that, therefore, the dispute is not subject to arbitration based on the exception in the provision. The initial, threshold issue became whether the dispute was subject to arbitration and, importantly, who decides this issue. The Court further looked at whether a trial court can resolve this issue under the “wholly groundless” exception, i.e.,the court can decide the issue if the argument for arbitration is wholly groundless.
Read the court decisionRead the full story...Reprinted courtesy of
David Adelstein, Kirwin NorrisMr. Adelstein may be contacted at
dma@kirwinnorris.com
Disputes Will Not Be Subject to Arbitration Provision If There Is No “Significant Relationship”
November 29, 2021 —
David Adelstein - Florida Construction Legal UpdatesAs you know from prior articles, arbitration is a creature of contract. This means if you want your disputes to be resolved by binding arbitration, as opposed to litigation, you want to make sure there is an arbitration provision in your contract. If there are certain types of disputes you do not want subject to arbitration, you want to specify those types of disputes/claims in your arbitration provision. If you are not sure, make sure to discuss the pros and cons of arbitration with your counsel when drafting and negotiating the contract. However, even with a broad arbitration provision, there are times where a dispute may still fall out of the scope of the arbitration provision, i.e., the dispute is not arbitrable. If this occurs, such dispute will be resolved by litigation. Parties that have buyer’s remove and do not want to arbitrate their dispute may try to make this argument that the dispute is not subject to the scope of the arbitration provision. There are times this argument carries weight because the dispute has no significant relationship to the agreement with the arbitration provision, as shown below.
In Deweees v. Johnson, 46 Fla. L. Weekly D2356b (Fla. 4th DCA 2021), a plaintiff purchased a home in a private residential community. The purchase contract with the developer contained a broad arbitration provision that materially provided that, “all post-closing claims, disputes, and controversies…between purchaser and seller will be resolved by binding arbitration except those arising under section G.5 and G.6 above.” Dewees, supra. Sections G.5 and G.6 provided that the purchaser will not interfere in the sales process with other purchasers and will not interfere with workmen during the construction process. There was also a workmanship and structural defect warranty for the dwelling that also contained an arbitration provision.
Read the court decisionRead the full story...Reprinted courtesy of
David Adelstein, Kirwin Norris, P.A.Mr. Adelstein may be contacted at
dma@kirwinnorris.com
Chinese Brooklyn-to-Los Angeles Plans Surge: Real Estate
April 01, 2014 —
Nadja Brandt and John Gittelsohn – BloombergIt took just one 15-minute phone call in July to persuade Ifei Chang to join Shanghai-based developer Greenland Holding Group Co. and lead a U.S. expansion. Within three months, she was running $6 billion of projects as part of a record push by Chinese investors into American property.
Greenland reached a preliminary agreement in October to buy a 70 percent stake in the $5 billion Atlantic Yards development in Brooklyn, New York. That followed a July deal to acquire a $1 billion residential-and-entertainment project in downtown Los Angeles. Chang, who took charge of that site upon arriving in the U.S., is now on the hunt for more investments.
“In China, you climb a ladder where everything is floating and moving so fast,” Chang, 49, said in an interview at her sparsely furnished 46th-floor L.A. office overlooking the empty lot where the Metropolis project will be built. “We come from a country of 1.4 billion people and a lot of economic growth. This kind of project and investment speed is very normal in China. That’s why we are so confident we will deliver this project.”
Greenland, like other Chinese companies, is committing to a growing number of multibillion-dollar developments outside of its home market. Chinese investments in U.S. commercial properties jumped almost 10-fold last year from 2012, with Manhattan the biggest area for purchases, followed by other New York City boroughs and Los Angeles, according to research firm Real Capital Analytics Inc.
Ms. Brandt may be contacted at nbrandt@bloomberg.net; Mr. Gittelsohn may be contacted at johngitt@bloomberg.net
Read the court decisionRead the full story...Reprinted courtesy of
Nadja Brandt and John Gittelsohn, Bloomberg
Hurricane Ian: Discussing Wind-Water Disputes
October 10, 2022 —
Randy J. Maniloff - White and Williams LLP“Most of the Florida homes in the path of Hurricane Ian lack flood insurance, posing a major challenge to rebuilding efforts, new data show. In the counties whose residents were told to evacuate, just 18.5 percent of homes have coverage through the National Flood Insurance Program, according to Milliman, an actuarial firm that works with the program.”
That’s how a September 29th article on The New York Times website begins.
When it comes to insurance coverage for hurricanes, the oft-stated maxim is that homeowner’s policies cover damage caused by wind but not flood waters.
Such a low take-up rate for flood insurance policies would seemingly create an incentive for those affected by Hurricane Ian to argue, when feasible, that their property damage, despite appearing to have been caused by flood, was also caused by wind. [And, of course, businesses looking to make business interruption claims, under commercial property policies, will be in the same boat.]
Further, even when someone has a homeowner’s policy and a flood policy, there may still be a reason to argue that the loss was caused by wind, as homeowner’s policies often have greater limits than flood policies.
[As an important aside, when hurricane damages are covered, homeowner’s policies can have a significant deductible, perhaps up to 10% of a home’s insured value.]
Read the court decisionRead the full story...Reprinted courtesy of
Randy J. Maniloff, White and Williams LLPMr. Maniloff may be contacted at
maniloffr@whiteandwilliams.com
