- Jennifer C. Archie, Latham & Watkins
- Jennifer A. Beckage, The Beckage Firm
- Jennifer A. Coughlin, Mullen Coughlin
- Chris Cwalina, Norton Rose Fulbright
- Luke Dembosky, Debevoise & Plimpton
- David N. Fagan, Covington
- Ashden Fein, Covington
- Nicole Friedlander, Sullivan & Cromwell
- Scott N. Godes, Barnes & Thornburg
- Daniel P. Greene, Beckage
- Sean B. Hoar, Lewis Brisbois Bisgaard & Smith
- Robert J. Hudock, King & Spalding
- Antony P. Kim, Latham & Watkins
- Theodore J. Kobus III, BakerHostetler
- Natasha G. Kohne, Akin Gump Strauss Hauer & Feld
- David C. Lashway, Baker & McKenzie
- Scott T. Lashway, Manatt, Phelps & Phillips
- Travis LeBlanc, Cooley
- Dominique Shelton Leipzig, Mayer Brown
- Paul H. Luehr, Faegre Drinker Biddle & Reath
- Edward R. McNicholas, Ropes & Gray
- Douglas H. Meal, Orrick
- Michael Morgan, McDermott Will & Emery
- David Navetta, Cooley
- Dominic A. Paluzzi, McDonald Hopkins
- Jim Pastore, Debevoise & Plimpton
- Kimberly Kiefer Peretti, Alston & Bird
- Michelle A. Reed, Akin Gump
- Stephen E. Reynolds, Baker McKenzie
- William E. Ridgway, Skadden
- Kari M. Rollins, Sheppard Mullin
- Lynn Sessions, BakerHostetler
- David A. Simon, Mayer Brown
- John Reed Stark, John Reed Stark Consulting
- Phyllis B. Sumner, King & Spalding
- Heather Egan Sussman, Orrick
- Aravind Swaminathan, Orrick
- Liisa M. Thomas, Sheppard Mullin
- Serrin Turner, Latham & Watkins
- Aleksandra Vold, BakerHostetler
About the Incident Response 40: Cybersecurity Docket’s Incident Response 40 is our list of the 40 best data breach response lawyers in the business. Based on nominations, input from numerous senior lawyers and other professionals in the field, and considerable research, we tried to answer a simple question:
Who would you hire if your company suddenly found itself the victim of a data breach?
We also imposed three key requirements:
- Candidates for the Incident Response 40 must be in the private sector for at least the past two years.
- Candidates for the Incident Response 40 must have a practice that is dedicated primarily to data breach response work.
- Candidates for the Incident Response 40 must be attorneys (as opposed to accountants, economists or other experts).