- Jennifer C. Archie, Latham & Watkins
- Jennifer A. Beckage, Phillips Lytle
- John P. Carlin, Morrison & Foerster
- Marcus A. Christian, Mayer Brown
- Jennifer A. Coughlin, Mullen Coughlin
- Luke Dembosky, Debevoise & Plimpton
- David N. Fagan, Covington
- David R. Fontaine, Kroll
- Sean B. Hoar, Lewis Brisbois Bisgaard & Smith
- David F. Katz, Nelson Mullins Riley & Scarborough
- Antony P. Kim, Orrick
- David C. Lashway, Baker & McKenzie
- Travis LeBlanc, Boies Schiller Flexner
- Paul H. Luehr, Faegre Baker Daniels
- Edward R. McNicholas, Sidley
- Douglas H. Meal, Ropes & Gray
- Dominic A. Paluzzi, McDonald Hopkins
- Jim Pastore, Debevoise & Plimpton
- Kimberly Kiefer Peretti, Alston & Bird
- Benjamin A. Powell, WilmerHale
- Justin L. Root, Dickinson Wright
- Jeewon Kim Serrato, Shearman & Sterling
- Alexander H. Southwell, Gibson, Dunn & Crutcher
- John Reed Stark, John Reed Stark Consulting
- Gerard M. Stegmaier, Reed Smith
- Phyllis B. Sumner, King & Spalding
- Heather Egan Sussman, Ropes & Gray
- Tara M. Swaminatha, Squire Patton Boggs
- Aravind Swaminathan, Orrick
- Liisa M. Thomas, Sheppard Mullin Richter & Hampton
About the Incident Response 30: Cybersecurity Docket’s Incident Response 30 is our list of the 30 best and brightest data breach response lawyers. Based on nominations, input from numerous senior lawyers in the field, and considerable research, we tried to answer a simple question:
Who would you hire if your company suddenly found itself the victim of a data breach?
We also imposed three key requirements:
- Candidates for the Incident Response 30 must be in the private sector for at least the past two years.
- Candidates for the Incident Response 30 must have a practice that is dedicated primarily to data breach response work.
- Candidates for the Incident Response 30 must be attorneys (as opposed to accountants, economists or other experts).