Business Email Compromise, Cyber Coverage, and Breach Litigation: A Full-Lifecycle Defense Playbook

Kevin V. Small | Hunton Andrews Kurth LLP

Kevin is a commercial litigator focused on insurance coverage disputes on behalf of policyholders. Drawing on his background in risk management and prior experience as an insurance broker, he represents clients in commercial property, cyber, builders’ risk, D&O, E&O, general liability, and representations and warranties claims, and assists with surety bond recovery and insurance broker malpractice matters. Kevin is an active thought leader on insurance issues, regularly writing, presenting, and contributing to his firm’s Insurance Recovery Blog.

• Education & Credentials

Kevin earned his Juris Doctor from the Seton Hall University School of Law. During law school, he served as a judicial intern for the Honorable Cathy Waldor, USMJ, in the United States District Court for the District of New Jersey, and also worked as a legal intern with the United States Attorney’s Office for the District of New Jersey. Prior to attending law school, Kevin studied Risk Management and Insurance at Temple University, which established the foundation for his career in the insurance industry.

• Recognition & Leadership

Kevin is recognized for his thought leadership in the area of insurance law and coverage disputes. He frequently writes and presents on insurance-related issues for industry professionals and has been quoted in prominent publications discussing insurance coverage matters. He also contributes regularly to the firm’s Insurance Recovery Blog, helping provide insight and analysis on developments affecting policyholders and the insurance industry.

• Professional Involvement

Kevin remains actively involved in the insurance and legal communities through his educational presentations, written publications, and industry commentary. His work includes presenting to professionals on insurance coverage issues, contributing articles and analysis on evolving insurance matters, and engaging with discussions surrounding policyholder rights and complex insurance disputes.

• Experience

Before entering the legal profession, Kevin worked for a leading risk management and insurance broking firm, where he advised Fortune 500 clients on structuring sophisticated risk management programs, brokered insurance components, and serviced a broad range of risk management needs. This experience, combined with his academic background in risk management and insurance, provides him with valuable industry insight that informs his representation of policyholders in complex insurance coverage disputes and related litigation matters.

Torrye Zullo | Hunton Andrews Kurth LLP

Torrye advises policyholders in complex insurance coverage matters as a member of her firm’s nationwide insurance coverage team. Her practice focuses on representing commercial policyholders across a broad range of insurance disputes and coverage matters, including property and business interruption claims, directors and officers liability, and cyber insurance issues. Prior to joining her current firm, Torrye developed significant experience analyzing commercial general liability insurance policies and providing coverage advice and recommendations to clients throughout various stages of litigation.

• Education & Credentials

Torrye earned her Juris Doctor from St. John’s University School of Law and received her Bachelor of Arts, summa cum laude, from Stony Brook University. During law school, she was actively involved in academic and advocacy organizations, serving as an executive member of the St. John’s University School of Law Moot Court Honor Society and as a senior staff member of the New York International Law Review.

• Recognition & Leadership

Torrye demonstrated leadership and academic excellence during her legal education through her involvement with the St. John’s University School of Law Moot Court Honor Society, where she served as an executive member. Her academic achievements also include graduating summa cum laude from Stony Brook University and contributing to legal scholarship as a senior staff member of the New York International Law Review.

• Professional Involvement

As part of a nationwide insurance coverage team, Torrye is involved in advising and representing commercial policyholders in sophisticated insurance coverage matters. Her work spans multiple areas of insurance law, including property and business interruption claims, directors and officers liability, and cyber insurance, allowing her to assist clients facing complex coverage disputes and litigation-related issues.

• Experience

Before joining Hunton Andrews Kurth LLP, Torrye worked at another firm where she gained extensive experience analyzing commercial general liability insurance policies and advising clients on coverage-related matters. Her experience includes providing insurance coverage advice and recommendations to clients at all stages of litigation, helping policyholders navigate complex insurance disputes and claims.

P. Reiko Koyama | Hunton Andrews Kurth LLP

Reiko is a partner on the litigation team whose practice focuses on complex commercial litigation, class action defense, and privacy and cybersecurity matters. Throughout her career, she has handled some of the most high-profile data breach litigation matters to date and regularly practices in federal and state courts across the country. Working closely with attorneys from the privacy and insurance coverage teams, Reiko represents and counsels a broad range of clients on litigation and privacy-related matters, including incident response, multidistrict litigation, and class action settlement.

• Education & Credentials

Reiko serves as a partner on the firm’s litigation team, where she focuses her practice on complex commercial litigation, privacy and cybersecurity matters, and class action defense. Her legal practice includes representing clients in federal and state courts nationwide and advising on sophisticated litigation and privacy-related issues, particularly in connection with data breach and cybersecurity matters.

• Recognition & Leadership

Throughout her career, Reiko has played a significant role in handling some of the most prominent data breach litigation matters in the country. As a partner within the litigation team, she works collaboratively with attorneys across the privacy and insurance coverage practices to guide clients through complex litigation, incident response matters, multidistrict litigation, and class action settlements.

• Professional Involvement

Reiko’s practice involves close collaboration with privacy and insurance coverage teams to advise and represent clients facing complex litigation and cybersecurity-related challenges. Her work includes counseling clients on privacy matters, incident response, multidistrict litigation, and class action defense, while also representing clients in courts throughout the United States.

• Experience

Reiko has extensive experience supporting clients through all phases of pre-litigation and litigation. Her work includes handling motion practice, discovery, settlement negotiations, and trial matters in complex commercial disputes, class actions, and cybersecurity litigation. She has also been deeply involved in high-profile data breach litigation matters and advises clients on a variety of privacy and incident response issues.

Maeve Malik | Hunton Andrews Kurth LLP

Maeve is a partner at Hunton Andrews Kurth with more than 10 years of experience advising clients on privacy, data protection, and cybersecurity matters. She counsels clients across industries on global privacy compliance and records management programs, and guides them through cybersecurity incident response, including several large-scale and high-profile incidents. Maeve also assists with proactive cyber readiness efforts such as tabletop exercises and incident response procedures, and is an active speaker and writer on privacy and cybersecurity topics.

• Education & Credentials

Maeve earned her Juris Doctor, cum laude, from William & Mary Law School and received her Bachelor of Arts, summa cum laude, with specialized honors, from Drew University. Her educational background supports her extensive work in privacy, cybersecurity, and data protection counseling for clients across numerous industry sectors.

• Recognition & Leadership

Maeve serves in several leadership roles within her firm and pro bono community. She is the co-chair of Hunton Andrews Kurth’s veterans pro bono program and also serves on the pro bono committee for the firm’s New York office. In addition to her leadership within the firm, Maeve is recognized as an active speaker and writer on privacy and cybersecurity issues, contributing thought leadership and practical insights on emerging legal and compliance matters.

• Professional Involvement

Maeve is actively involved in both professional and pro bono initiatives related to privacy, cybersecurity, and veterans’ advocacy. Her pro bono practice focuses on providing legal services to veterans, particularly in matters involving the recovery of disability benefits for physical and mental conditions incurred during military service. Professionally, she frequently speaks and writes on privacy and cybersecurity topics while advising organizations on compliance, data protection, cyber readiness, and incident response matters.

• Experience

With over a decade of experience, Maeve regularly advises clients on global privacy compliance programs, records management strategies, and data protection issues aimed at mitigating privacy-related risks. She has extensive experience handling cybersecurity incident response matters, including large-scale and high-profile incidents, and also works with clients on proactive preparedness measures such as tabletop exercises and incident response planning. Her practice spans a wide range of industries and focuses on helping organizations navigate evolving privacy and cybersecurity challenges.

SESSION 1 – Cyber Risk and Insurance Recovery | 1:00pm – 2:00pm

This session examines how cyber, commercial crime, and other responsive policies answer to BEC, ransomware, and funds-transfer fraud, addressing causation, “direct loss” disputes, claims strategy, bad faith positioning, and attorney advisory risk.

BREAK | 2:00pm – 2:10pm

SESSION 2 – Introduction to Cyber Incident Response and Litigation | 2:10pm – 3:10pm

This session covers the data breach lifecycle from initial investigation and regulatory notification through class action defense, examining standing, motions to dismiss, class certification, settlement strategy, indemnification provisions, and third-party litigation under current cybersecurity law.