David F Katz Richard D Smith Elizabeth K Hinson Jason Mark Anderman And Sarah Statz

August 07, 2017 | Texas Lawyer

Understanding third-party service provider relationships and the security risks they present to any organization is an essential element of cybersecurity planning. Bad actors continue to exploit the risks presented by third-party service providers that maintain access to corporate-owned information systems. Over the last several years, companies have found themselves the victim of costly and high profile data breaches occurring as a result of a third-party service provider's security failures. See, e.g., In re Target Corp. Data Sec. Breach Litig., 66 F. Supp. 3d 1154 (D. Minn. 2014); In re: The Home Depot, Inc., Customer Data Sec. Breach Litig., No. 1:14-MD-2583-TWT, 2016 WL 2897520, at 1 (N.D. Ga. May 18, 2016).

By DAVID F. KATZ, RICHARD D. SMITH, ELIZABETH K. HINSON, JASON MARK ANDERMAN AND SARAH STATZ

36 minute read