Aravind Swaminathan

Aravind Swaminathan, Orrick's Lead Partner for Regulatory & Enforcement, helps clients navigate a new world of regulatory risk, from cybersecurity incidents to online Trust & Safety to defending executives in high-stakes litigation and enforcement actions. In all of his work, he draws on his roots as a federal cybercrime prosecutor and a high school technology teacher.

• Engagements

  Cybersecurity and Privacy Matters

  • Represented technology company in security breach affecting approximately 100 million records
  • Represented travel and transportation company in network intrusion, connected with recent acquisition
  • Represented travel and leisure company in attack on customer database affecting records of individuals in China, EU, and US
  • Represented computer hardware manufacturer in security breach affecting credit card information, and ensuing state and federal investigations
  • Represented information security professionals in litigation and investigations in connection with large data breaches
  • Represented major contracting company in national security-related cybersecurity breach that compromised of industrial control systems
  • Represented enterprise software and information solutions company in breach of credit card and login/password information
  • Represented IT management software company compromised by botnet that leveraged managed endpoints to mine for digital currency
  • Represented digital currency security company in phishing attack directed at senior management that resulted in extortionate hacker threats
  • Represented major city in connection with compromise of personal information of utility customers and citizens
  • Represented industrial supply company in compromise of usernames and passwords for business-to-business customers
  • Directed cybersecurity assessments and planned remediation efforts for technology, financial services, and other companies
  • Advised networking infrastructure company in developing technical global privacy compliance strategy
  • Counseled companies in cybersecurity incident response planning, and facilitated tabletop exercises
  • Advised boards of directors on corporate governance responsibilities relating to cybersecurity and data privacy

  Privacy/Cybersecurity/Consumer Protection Litigation

  • Represented national retailer in class action litigation arising out of security incident
  • Representing cybersecurity threat intelligence company in federal court litigation alleging privacy and CFAA allegations
  • Represented public agency in consumer protection claims regarding unlawful billing practices in connection with utility services
  • Represented major retailers in class action litigation alleging deceptive trade practices in connection with gift cards
  • Represented company in data breach class action litigation affecting tens of thousands of employees' Social Security number and tax information
  • Represented two former Chief Information Security Officers in consumer class action, derivative, and securities litigation following mega-breaches that each affected tens of millions of records
  • Represented numerous technology and fintech companies in class action litigation brought under the Telephone Consumer Protection Act
  • Represented information solutions company against claims asserted under the Electronic Communications Privacy Act
  • Represented payment processor litigation with acquiring bank and ISO in connection with processing of credit card transactions
  • Represented application and software company in spyware and consumer protection investigation by Washington State Attorney General

  White-Collar and Investigation Matters

  • Represented former Chief Information Security Officer in connection with SEC and DOJ investigations following largest data breach in history
  • Represented one of the nation's largest independent automobile dealerships in federal money laundering and tax investigation resulting in favorable non-prosecution agreement for individual company owners
  • Represented individual in government procurement and false statements investigation and prosecution
  • Represented healthcare provider in negligent homicide investigation
  • Represented large healthcare provider and leading pharmaceutical company in separate false claims investigation by Washington State Attorney General
  • Represented pharmacy chain in DEA diversion investigation
  • Represented Japanese individuals in Department of Justice and Securities and Exchange Commission investigation arising out of cross-border healthcare receivables investment company
  • Represented environmental technology solutions company in federal criminal grant fraud investigation, resulting in no charges brought
  • Led internal investigation at public technology company of allegations of Wiretap and Washington State Recording Act violations

  Other

  • Served as General Counsel to Washington State Governor Jay Inslee's task force on drone legislation
  • Served as member of City of Seattle's Privacy Advisory Committee