Data Privacy & Cybersecurity

Business email compromise typically begins with a phishing or account-takeover attack that lets criminals impersonate an executive or vendor and redirect payments. Fey LLC helps organizations implement layered defenses, out-of-band payment verification procedures, multi-factor authentication, dual-approval controls for wire changes, and employee awareness training. We also advise on rapid response steps, including notifying your bank and the FBI, when a fraudulent transfer is suspected so funds can potentially be recovered.

On discovery of a suspected breach, the priority is to contain the incident, preserve evidence, and launch a privileged investigation to determine what data and individuals were affected. Notification obligations vary by jurisdiction and data type, all 50 U.S. states, plus laws like HIPAA and the GDPR, impose differing deadlines and content requirements. Fey LLC guides clients through incident response and the analysis of which regulators, individuals, and business partners must be notified, and within what timeframes.

Choosing the right forensic firm before an incident, and engaging it through counsel, helps preserve privilege and ensures a defensible investigation. Fey LLC assists clients in vetting providers, structuring engagement letters, and overseeing the forensic work so that findings support both regulatory response and any subsequent litigation. We help confirm the provider has appropriate expertise, capacity, and chain-of-custody practices for your environment.

Yes. People remain the most common entry point for attackers, so simulated phishing campaigns and social engineering training measurably reduce click rates and reporting delays over time. Penetration testing complements training by identifying technical vulnerabilities before adversaries exploit them. Fey LLC helps clients design these programs, oversee the vendors that conduct them, and document the results to demonstrate reasonable security to regulators and insurers.

A wave of class action litigation now targets website pixels, session replay tools, chat features, and video tracking under statutes like CIPA, the VPPA, and the TCPA. Fey LLC helps clients inventory the tracking technologies on their sites and apps, evaluate consent and disclosure practices, and remediate high-risk configurations. Proactive assessment and updated privacy notices can substantially reduce exposure to these increasingly common claims.