We represented a large hospital system in privacy and security matters, including successfully handled response, investigation and resolution when the organization experienced a phishing attack affecting multiple hospitals. This involved coordinating incident response and data forensics teams, drafting individual and government notifications, and preparing responses to three separate government investigations arising from the breach on the company’s behalf. All three investigations were successfully closed with no penalty to the company.