In the past weeks, we’ve reported that while most companies are properly disclosing their exposure to cybersecurity threats, the increasing occurrence and severity of cyber attacks has the SEC considering even more stringent cybersecurity disclosure requirements. Now, another study reports that while 38% of Fortune 500 companies have disclosed that a potential cyber event would “adversely” impact their business, only six percent of those companies purchase cyber security insurance.
What of the other 94%? Should they be doing more to protect themselves against the growing cyber threat? Do their directors have a fiduciary obligation to do more?
In re Caremark International Inc. Derivative Litigation, a Delaware decision from 1996, sets forth a director’s obligations to monitor against threats such as cyber attacks. In short, as long as a director acts in good faith, as long as she exercises proper due care and does not exhibit gross negligence, she cannot be held liable for failing to anticipate or prevent a cyber attack. However, if a plaintiff can show that a director “failed to act in the face of a known duty to act, thereby demonstrating a conscious disregard for [her] responsibilities,” it could give rise to a claim for breach of fiduciary duty. Read More
Putting an end to shareholder derivative litigation arising from News Corp.’s phone-hacking scandal, the company’s directors agreed last week to a record-breaking $139 million cash settlement. According to the plaintiffs’ lawyers, the deal is the “largest cash derivative settlement on record.” The settlement will be funded by directors’ and officers’ insurance proceeds.
Plaintiffs initially filed suit in the Delaware Court of Chancery in March 2011, asserting claims based on the company’s proposed acquisition (since completed) of Shine Group Ltd., a television and movie production company owned by the daughter of News Corp. Chairman Rupert Murdoch. According to plaintiffs, the News Corp. directors breached their fiduciary duties by permitting the purchase of Shine at an excessive price. The court later consolidated various related cases, and plaintiffs’ allegations expanded to include claims that the company’s directors failed to properly investigate the UK phone-hacking allegations that led to the demise of News Corp.’s News of the World. Read More
In a recent decision, the Delaware Supreme Court reversed the Court of Chancery in Pyott, et al. v. Louisiana Mun. Police Emp. Ret. Sys., et al., holding that a derivative suit against Botox-maker Allergan, Inc. should be dismissed because Allergan had already secured a judgment in its favor in a nearly identical suit in California. The decision will make it more difficult for plaintiffs’ lawyers to pursue duplicative derivative litigation in multiple jurisdictions.
Shortly after Allergan entered into a $600 million settlement with the U.S. Department of Justice over alleged off-labeling marketing of Botox, separate groups of shareholders brought suit in Delaware and California. Before motions to dismiss in the Delaware derivative litigation were heard, a California Federal Court dismissed the California derivative suit, finding that plaintiffs could not support the inference that the Allergan directors conspired to violate the law, which prevented plaintiffs from showing that making a demand on the Board to investigate the matter would be futile. The Delaware Court of Chancery held that the California Judgment did not bar the Delaware action and denied Allergan’s motion to dismiss. The Court of Chancery’s decision that it was not required to give preclusive effect to the California judgment was based on two principles: first, under Delaware law, the shareholder plaintiffs in two jurisdictions were not in privity with each other, and second, the California shareholders were not adequate representatives of the corporation. Read More
Please do not include any confidential, secret or otherwise sensitive information concerning any potential
or actual legal matter in this e-mail message. Unsolicited e-mails do not create an attorney-client
relationship and confidential or secret information included in such e-mails cannot be protected from
disclosure. Orrick does not have a duty or a legal obligation to keep confidential any information that
you provide to us. Also, please note that our attorneys do not seek to practice law in any jurisdiction
in which they are not properly authorized to do so.
By clicking "OK" below, you understand and agree that Orrick will have no duty to keep confidential any
information you provide.