

Cyber and Data Litigation
Allen & Overy’s expert team handles a wide range of litigation relating to cyber and data security, with particular experience in cross-border cases.
Working with our first rate regulatory specialists, we handle reporting, enforcement and prosecution, including cases involving cyber and data security breaches.
Our global team includes consultant David Smith, former Deputy Information Commissioner at the UK Information Commissioner’s Office.
A&O’s clients in this area include national and international businesses, ranging from telecommunications companies to the world’s largest financial institutions. Our work covers diverse issues including:
- representing clients in follow-on litigation related to data breaches
- advising on options for criminal and civil actions against hackers
- financial crime risks in relation to the payment of ransoms (including money laundering, terrorism financing and economic sanctions)
- use of injunctions
- liaison with regulators
- employee theft
- class actions
- data misuse by third parties
- anti-terrorism issues
- denial-of-service and distributed denial-of-service attacks
- third-party disclosure applications
Explore our services
News and insights

Publications: 28 June 2022
Lost your bitcoin private key? Bitcoin developers are not required to grant you access
Buyers of bitcoin beware: if you lose your online banking password or PIN the solution is to contact your bank and ask for a new one. However, if you lose the private key to your bitcoin, the High…

Publications: 28 February 2022
Greater China Risk Insight: Looking ahead in the Year of the Tiger
The last two years have reshaped the global economy and socioeconomic policies, and have given rise to new risks and challenges. The world of disputes is also rapidly evolving. As we look back to…

Blog Post: 29 November 2021
Beyond Lloyd v Google: Are class actions for data breach dead?
The decision of the UK Supreme Court in Lloyd v Google is a welcome relief for data controllers. However, is it the end of class actions for data breach?

Blog Post: 10 November 2021
Lloyd v Google: a sigh of relief for data controllers
In unanimously refusing to allow a representative action to proceed, the UK Supreme Court may have sounded the death knell for opt-out class actions in England for data breaches: Lloyd v Google [2021]…
Recognition
Working with them is delightful. They are highly professional, deliver immaculate client service and have a deep knowledge of data protection technicalities.
Chambers Global 2019, Data Protection
Read our blog

Digital hub
Explore diversity, equity and inclusion at A&O

Striving for a better gender balance
Read more

Race and ethnicity - enabling diverse people to thrive
Read more

Supporting our LGBTQ+ colleagues and communities
Read more

Improving social mobility
Read more

Supporting our colleagues with disabilities
Read more