A U.S. judge’s ruling that law firm Covington & Burling must identify clients caught up in a cyberattack on the firm gives federal agencies a path to scrutinize companies by obtaining information from their law firms, attorneys said.

But lawyers watching the case also said the ruling placed curbs on the U.S. Securities and Exchange Commission’s authority that allayed some of law firms’ biggest concerns.

The ruling will have “chilling ramifications” on attorney-client relations, said Sarah Concannon, a Quinn Emanuel partner and former SEC trial lawyer. The commission will craft more subpoenas for law firm records “based on nothing more than suspicion of violation of the securities laws,” she said.

US District Judge Amit Mehta ruled July 24 that Covington must disclose the identities of seven public-company clients to the SEC as part of an investigation into a 2020 cyberattack. Mehta narrowed the SEC’s request for nearly 300 client names, saying it was “too broad” and that Covington’s probe found only seven clients may have had non-public information exposed.

The dispute became a test case over how far a law firm’s obligations could go as it responds to data breaches. More than 80 law firms submitted an amicus brief arguing the SEC’s request violated bedrock principles of confidentiality while turning attorneys against their clients.

Even in its narrowed form, Mehta’s order represents “a door” that law firms “don’t want opened,” said John Browning, a Spencer Fane trial partner and former Texas appellate court judge. “We’re opening the door a crack and that might lead it to being widened later on,” he said.

Covington said in a statement the firm will “consider any next steps in consultation with our affected clients.” The SEC declined to comment.

Client Protections
The case has its roots in a 2020 hack on Microsoft software servers perpetrated by actors believed to be associated with the Chinese government.

The SEC argued that it needs the Covington client names to support an investigation into illicit trading and to analyze whether affected companies made adequate cyber disclosures in compliance with securities laws.

“Future firms will be hacked and the question will arise over and over again: What are regulators going to be able to obtain through subpoena?” said Fordham Law School professor Bruce Green. The opinion of one district court judge carries limited significance, he added.

“Firms will continue to contend with the SEC until there is a settled understanding,” Green said.

The case could have broad implications as law firms become a more frequent target of cyberattacks. Mehta’s order, however, raises the question of whether Covington’s clients could object to the firm sharing their identities after disclosing their non-public information may have been compromised, said Jennifer Arlen, a New York University law professor.

Adam Pritchard, a University of Michigan law professor, said the order is lessened in consequence since the disclosure is a client’s identity, rather than their data or communications.

“Standing on its own, it’s not an earth-shaking decision,” Pritchard said. “But with the SEC, when you give them an inch, they will always ask for a mile. It’d be surprising if this were the last case we saw like this.”

The case is Securities and Exchange Commission v. Covington & Burling LLP, D.D.C., No. 23-00002, order filed 07/24/2023

_______________________________________________________________________ Groundbreaking Guide For Lawyers: Adigwe Publishes ‘Artificial Intelligence For Lawyers’ With Free Research eBook The book also examines Nigeria's legal ecosystem, focusing on the LPELR and NBA AI Guidelines. As a bonus, every purchase comes with a FREE eBook titled: How to Use the AI Features in LegalPedia and LawPavilion. Ohio Books Ltd praises the publication, stating: "....this is the only Nigerian book I know of on the topic." How to Order: 📞 Call, Text, or WhatsApp: 08034917063 | 07055285878 📧 Email: benadigwe1@gmail.com 🌎 Website: www.benadigwe.com Ebook Version: Access it directly online at https://selar.com/prv626 Authored by Ben Ijeoma Adigwe Esq., ACIarb (UK), LL.M, Dip. in Artificial Intelligence, Director at the Delta State Ministry of Justice, Asaba, Nigeria. _______________________________________________________________________

“Order Justice Omolaye-Ajileye’s Electronic Evidence Books Now” — Essential Guides On Evidence Act, Case Law And Digital Proof

Two leading books on electronic evidence by Hon. Justice Professor Alaba Omolaye-Ajileye, Rtd., PhD, FICMC, are now available for purchase. The publications, Electronic Evidence (Second Edition), With The Evidence Act, 2011 and Compendium Of Cases On Electronic Evidence, Volume II, 2020–2025, provide practical guidance, legal analysis and recent judicial authorities on electronic evidence in Nigeria.Order directly from the author here: https://velvety-cendol-7387ed.netlify.app/ ______________________________________________________________________ [A MUST HAVE] Evidence Act Demystified With Recent And Contemporary Cases And Materials
“Evidence Act: Complete Annotation” by renowned legal experts Sanni & Etti.
Available now for NGN 40,000 at ASC Publications, 10, Boyle Street, Onikan, Lagos. Beside High Court, TBS. Email publications@ayindesanni.com or WhatsApp +2347056667384. Purchase Link: https://paystack.com/buy/evidence-act-complete-annotation ________________________________________________________________________ “Enhance Legal Practice With Authoritative Reports” — Alexander Payne Offers Comprehensive Law Reports, Spanning Over A Century Of Nigerian Jurisprudence

Interested buyers are encouraged to place their orders and enquiries via: 0704 444 4777, 0704 444 4999, 0818 199 9888 Website: www.alexandernigeria.com

_______________________________________________________________________