The presentation begins with the perspective of a hacked company in Germany. It examines the legal claims available to the affected company. It examines potential (damages) claims against all relevant parties.

It analyzes claims against the hackers and assesses their practical feasibility. Furthermore, it discusses any liability of management/executive directors towards the company. This also includes claims against employees (especially those in the IT department) who may have negligently facilitated the cyberattack. Also of interest are potential claims by the company against the provider of the anti-virus software or firewall. Ultimately, the respective software – assuming regular updates and patches – did not prevent the hacker attack. Potential misconduct by t ...