Law360 has tapped Michael Ronickher, partner in the whistleblower practice at Constantine Cannon, for its 2019 Rising Star series. Law360 selected Mike for his work representing whistleblowers in all manner of reward programs, including his role in the groundbreaking cybersecurity whistleblower case against Cisco.
What motivates Mike? His clients: “Our clients are a real reason that we all get out of bed in...
Futures commission merchant Phillip Capital Inc. will pay $1.5 million to settle CFTC charges that its email system was breached and customer information accessed, with cyber criminals withdrawing $1 million in PCI customer funds. The CFTC found that PCI failed to disclose the breach to its customers in a timely manner, and failed to have adequate cybersecurity policies and employee supervision. CFTC
Google and its subsidiary, YouTube, will pay a record $170 million to the FTC and New York for allegedly violating the Children’s Online Privacy Protection Act (COPPA) Rule, which requires that websites and services directed at children under 13 obtain parental consent prior to collecting personal information. According to the complaint, YouTube allegedly monitored, tracked, and served targeted ads to children under 13 without parental consent. FTC, NY AG
Facebook, Google, Samsung, Microsoft – we rely on large tech companies to safeguard our privacy and time and again they let us down. Yet tech companies are known to be highly selective employers, hiring the best and brightest and often paying better than companies in other industries. So how is it that they remain vulnerable to data breaches with such talent at their disposal?
Cisco whistleblower James Glenn has...
Constantine Cannon represented a whistleblower in a False Claims Act case alleging Cisco Systems sold the government noncompliant video surveillance software vulnerable to unauthorized access and manipulation. In July 2019, the company agreed to pay $8.6 million to settle the matter. It was the first cybersecurity whistleblower case ever successfully resolved under the False Claims Act. Our client received a whistleblower award of 20% of the government's recovery. Read more -- Washington Post, Reuters, AP, CC.
Constantine Cannon Client’s Historic False Claims Act Settlement Against Cisco for Cybersecurity Fraud Makes Headlines
Posted 08/9/19
If you’ve ever seen a heist movie, you likely know the scene. The technology-savvy member of a motley crew of criminals is huddled in a van or in a secret lair, surrounded by monitors. After a tense few minutes of maniacal typing, he or she yells “I’m in!” and hacks into the video surveillance system of the target hotel/casino/museum. In an instant, the cameras switch off or go to a pre-taped reel, and the...
Question of the Week — Should Companies Face Tougher Consequences for Cybersecurity Breaches?
Posted 08/8/19
Last month, a whistleblower represented by Constantine Cannon became the first person to win a False Claims Act settlement for cybersecurity fraud. The whistleblower, a former Cisco Systems employee, allegedly warned the company back in 2008 that its Video Surveillance Manager (VSM) system was highly vulnerable to attacks by hackers. The system’s flaws allegedly could have enabled hackers to delete video footage,...
The United States and 15 states have settled with Cisco Systems, Inc. for $8.6 million in the first cybersecurity whistleblower case ever successfully brought under the False Claims Act. Cisco was accused of selling a video surveillance software to the U.S. government and state purchasers – including the military, FEMA, Homeland Security, and the Secret Service -- that could be easily exploited by hackers, and doing nothing to resolve or report the issue for years after the vulnerability was identified. AG NY; AG VA
Cisco Whistleblower Represented by Constantine Cannon Wins First-Ever False Claims Act Settlement for Cybersecurity Fraud
Posted 07/31/19
In the first cybersecurity whistleblower case ever successfully litigated under the False Claims Act, Cisco Systems, Inc. has agreed to an $8.6 million settlement to resolve allegations it knowingly sold vulnerable video surveillance software to federal, state and local government agencies, exposing government systems to the risk of unauthorized access and the manipulation of vital information.
This qui tam...
Facebook Inc. has agreed to pay a $100 million SEC penalty to resolve charges that its public disclosures omitted material information about a third party's misuse of Facebook user data. Facebook's disclosures presented the risk of misuse of user data as hypothetical when Facebook knew in 2015 that, in fact, Cambridge Analytica and a researcher had collected and transferred data on approximately 30 million Americans. Furthermore, when media investigations of Cambridge Analytical began, Facebook misleadingly stated that it had discovered no evidence of wrongdoing by Cambridge Analytica. SEC