BakerHostetler provides expertise to its client base in the healthcare, financial services, and technology sectors, with strengths in incident response, governance, and privacy. The firm is particularly adept in breach litigation and class action cases, as well as HIPAA audits and investigations. The practice is led by Theodore Kobus III in New York, with extensive experience handling data breach responses, compliance, and defending class action litigation and regulatory actions. Craig Hoffman in Cincinnati is noted for his expertise in payment card security incidents, while Houston-based Lynn Sessions focuses on healthcare-related privacy, cybersecurity incident response, and regulatory investigations before the OCR and HHS. In Denver, Paul Karlsgodt is well-versed in technology, private equity, and healthcare data breaches and privacy incidents. Based in Los Angeles, Jennifer Mitchell is geared to support media, entertainment, and healthcare clients on global strategic privacy matters and compliance, including GDPR, CCPA, and HIPAA.
Legal 500 Editorial commentary
Testimonials
Collated independently by Legal 500 research team.
‘Unmatched experience addressing data security incidents.’
‘Very practical, have seen it all on the incident response front.’
Key clients
- AT&T
- Marriott International
- L3Harris Technologies, Inc.
- Dentsu International Limited
- Airbnb
- The Cleveland Clinic
- Mayo Clinic
- Fred Hutch Cancer Center
- Penn Medicine
- Duke Medicine
- Boston Children’s Hospital
- University of Texas M.D. Anderson Cancer Center
- Warby Parker
- Grindr
- Overlake Hospital Medical Center
- Janie & Jack LLC
- Dell Technologies
- Panda Restaurants
- Yuma Regional Medical Center
Work highlights
Providing litigation, regulatory, and strategic counsel to Marriott International, seven years after the Starwood database security incident.
Guiding multiple high-profile healthcare clients through the complexities of responding to cybersecurity incidents and ransomware attacks.
Secured a victory on behalf Overlake Hospital Medical Center, by obtaining dismissal of the plaintiff’s putative class action lawsuit, which had alleged that the client had installed various third-party analytics software on its public website that caused her alleged protected health information and personally identifiable information to be transmitted to Meta and Google.
Lawyers
Leading partners
The strongest partners in their field, leading on market-leading deals and endorsed by peers and clients alike.
Theodore Kobus III
Practice head
Theodore Kobus III
Other key lawyers
Craig Hoffman; Lynn Sessions; Paul Karlsgodt; Jennifer Mitchell