An Opening Salvo for Cybersecurity FCA Cases
Client Alert | 1 min read | 08.06.19
On July 31, 2019, Cisco Systems agreed to pay $8.6 million to settle allegations in United States ex rel Glenn, et al v. Cisco Systems, Inc. that the company violated the False Claims Act (FCA) by selling video surveillance systems to state and federal agencies that contained software flaws enabling those agencies to be hacked. An employee of one of Cisco’s resellers filed the suit in 2011 after discovering the alleged security weakness that could permit a cyber intruder to obtain administrative access to the software that managed video feeds.
The cybersecurity specialist alleged in his complaint that the company violated the FCA by (1) failing to inform government agencies that the software did not comply with the standards imposed by the Federal Information Security Management Act (FISMA) and (2) by providing a product that was worthless due to the security flaws in the software. Although this settlement marks the first time that a cybersecurity related qui tam has ended in a recovery through a settlement or judgment, it appears to be a sign of the times. As more such cases—alleging noncompliance with the DFARS Safeguarding Rule or FedRAMP requirements— are investigated and proceed through the courts, Glenn could be the first of many such recoveries.
Contacts
Insights
Client Alert | 3 min read | 10.24.25
On October 23rd, the U.S. Department of Energy (“DOE”) sent a letter to the Federal Energy Regulatory Commission (“FERC”) containing an Advance Notice of Proposed Rulemaking (“ANOPR”) with principles for all large load interconnections across the US, including those co-located with generating facilities.[1] Significantly, the Secretary of Energy states that the interconnection of large loads to the transmission system “falls squarely” within FERC’s jurisdiction, thus weighing in on a dispute that has been pending before FERC for over a year. This move appears to be a reaction to the continued pendency before FERC of the colocation dockets[2] and a technical conference on colocation held almost a year ago.[3]
Client Alert | 3 min read | 10.24.25
Client Alert | 3 min read | 10.23.25
Are You Ready for the Economic Crime and Corporate Transparency Act? Key Changes for Businesses
Client Alert | 8 min read | 10.23.25
Ransomware on the Rise: The Expanding Role of Legal Counsel in Incident Response
