In the wake of a high-profile security breach some months ago, a NASDAQ-traded company that provides technology-driven products and services to secure physical commercial and residential properties retained Lexpat to investigate the breach, which had targeted and more directly implicated a different company with which our client had a close operating partnership.  Lexpat’s investigation resulted in a detailed report with recommendations about how the client can improve certain security and compliance practices to make its own systems, its clients’ properties, and its product’s end-users more secure.

The investigation was led by Nate Charles, a former prosecutor for the Counterespionage and Export Controls Section of the U.S. Department of Justice, with the help of Joan Hodge and Adam Pearlman.

“This was a highly sophisticated social-engineering attack that targeted and compromised several individuals with sensitive jobs and access to important people,” Charles explains.  “The attackers also exploited both physical and tech-based vulnerabilities to pass themselves off as something they were not to gain access they should not have and compromise the people and buildings they targeted.  Although they turned out not to be actual spies, they sure tried to play the role.  And for a while, they did a great job at it!”

Hodge, who is an expert in risk analysis and management, offers, “Companies’ founders and innovators rightly focus on how their products make people’s lives better.  The idea that some people, including insiders, might try to manipulate your products, services, and systems to serve their own nefarious ends, is often not imagined.  As a result, serious risks are routinely overlooked.”

“The intersection of tech and security issues is always complex and multi-faceted,” adds Charles. “And making sure you have adequate internal controls is just as important when it comes to end-users’ privacy as it is to protecting your own corporate information and infrastructure. These areas are increasingly regulated and require robust compliance – both to protect your company from litigation and enforcement actions, and to protect your brand and credibility with consumers.”

“We are always proud to be able to help our clients to resolve their legal and security challenges,” says Pearlman, who is also Lexpat’s Managing Director and leads Lexpat’s Private Advisory practice.  “This case involved both.  With a security breach, internal reviews of your policies and compliance measures, and solid cooperation with law enforcement are all key factors.  But they’re also just the tip of the iceberg.  Nate and Joan did fantastic work on this matter, and I’m proud of the results we delivered for the client.”

Lexpat Global Services is a team of counselors, consultants, and capacity-builders.  We feature elite lawyers, consultants, investigators, and program officers serving private industry and public sector clients, especially those working at the intersection legal and security issues.  To learn more about Lexpat’s team and services, visit www.lexpatglobal.com.  To contact Nate, Joan, Adam, or any of our experts, email us at [email protected].