SolarWinds – Pandora’s Box of Cybersecurity and Data Risks

In December 2020, SolarWinds Inc., a US company that builds products for IT management disclosed that its product Orion, with thousands of private and public sector customers, had been exploited to share malware. The cyberattack has been characterized as the largest and most sophisticated attack ever and having taken thousands of engineers to create. The risk of the SolarWinds attack comes not only from the direct use of Orion, but the indirect use of Orion through vendors and supply chain. This panel will discuss the practical implications of the SolarWinds attack, including the effects that the attack have had on the allocation of risk between IT product providers and their customers and the stakes at issue at the negotiation table.

MATERIAL:

• SolarWinds Presentation Slides (13 Pages)

SPEAKERS:

• Robert C. Atkinson, Associate General Counsel, Administrative Vice President, M&T Bank
• Jessica Copeland, Member and Chair of Cybersecurity & Data Privacy Practice Group, Bond Schoeneck & King
• Kevin Jordan, Global Legal Lead, Associate General Counsel, McKinsey & Company  
• Diana Santos, Assistant General Counsel, Memorial Sloan Kettering Cancer Center
• Adrienne Valencia Garcia, Senior Blockchain Counsel and IBM Executive, IBM

Hosted by the Privacy, Big Data & Cybersecurity Committee