Steven Puiszis Quoted in Bloomberg BNA Article about WannaCry Ransomware Attack

May 19, 2017

Steven Puiszis – a Chicago-based partner who serves as the Privacy and Security Officer at Hinshaw & Culbertson LLP – was quoted in the article "Ransomware Strike: What Impact on Corporate Liability?" published by Bloomberg BNA on May 16, 2017. The article discusses the corporate regulatory and litigation risks of cyberhacking in the wake of the recent worldwide ransomware attack "WannaCry" that affected banks, hospitals and other companies.

Puiszis discussed the risk of litigation, in particular consumer class actions, as these are often filed following a security incident as a result of a major cyberattack. Puiszis said that "WannaCry" likely doesn't pose much risk of a class action, noting that personally identifiable information "wasn't stolen or put on the deep web" to be sold.

In the interview with Bloomberg BNA, Mr. Puiszis, who was in London speaking and moderating a panel on cyber security at a forum for General Counsel of UK law firms also explained the WannaCry ransomware strain included an exploit that targeted a server messaging block flaw in versions of the Microsoft operating system that predated Windows 2010. Microsoft released a patch in March of this year to close this vulnerability and then another emergency patch on Friday for versions of its operating system that it had stopped supporting. He noted that the WannaCry epidemic demonstrates that "patching" is a critical aspect of cyber security that should not be overlooked.  

Read the full article, "Ransomware Strike: What Impact on Corporate Liability?" on the Bloomberg BNA website (subscription required)

Hinshaw & Culbertson LLP is a U.S. based law firm with offices in 11 states and London. The firm's national reputation spans the insurance industry, the professional services sector—including representation of law firms and lawyers—and other highly regulated industries, such as banking and finance and the debt collection sector. Hinshaw also provides a series of closely coordinated litigation, business advisory and transactional services to clients of all sizes as well as governmental and public sector entities.