Matthew B. Welling
Overview
Matthew B. Welling is a partner in Crowell & Moring's Washington, D.C. office, where he practices in the firm's Privacy and Cybersecurity and Energy groups. Matthew has a deep technical background that he leverages to represent clients in a wide range of counseling and regulatory matters. His experience includes cybersecurity and privacy incident response, compliance reviews, risk assessments, and the development of corporate policies and procedures, such as incident response plans. Matthew has a diverse background in M&A and other corporate transactional issues, with specific recent experience with technology transactions, cybersecurity issues, and critical infrastructure project development.
Career & Education
- Georgetown University Law Center, J.D., 2010
- Indiana University, B.S., with honors, 2002
- District of Columbia
- Virginia
Matthew's Insights
Client Alert | 14 min read | 07.24.24
On Thursday, July 18, 2024, Judge Paul Engelmayer, U.S. District Judge for the Southern District of New York, dismissed the bulk of the Securities and Exchange Commission’s (SEC’s) landmark civil securities law claims against SolarWinds and its Chief Information Security Officer (CISO) Timothy Brown. The Court dismissed all allegations based on SolarWinds’ public disclosures made after SolarWinds became a victim of the well-publicized SUNBURST cybersecurity attack, and also dismissed the SEC’s claims relating to SolarWinds’ internal accounting controls and disclosure controls and procedures. However, the Court declined to dismiss claims of securities fraud against SolarWinds and its CISO based on SolarWinds’ pre-SUNBURST disclosures, finding that the SEC had properly pleaded that the company’s publicly-posted “Security Statement” was materially false and misleading.
Firm News | 4 min read | 06.24.24
Crowell Earns Top Rankings from Legal 500 United States 2024
Firm News | 4 min read | 06.04.24
ArmorText and Crowell & Moring Release New Open Source Cybersecurity Tabletop Exercises
Insights
Tabletop Exercises: A Leading Practice to Strengthen Defenses
|05.14.24
Privacy and Cybersecurity Outlook: The 2024 Landscape
The Global Uptake of the NIST Cybersecurity Framework
|02.15.16
Cybersecurity Law & Practice, Volume: 2 Issue: 2
"Arresting Disaster: Driving Incident Response and Operational Resilience in an Age of AI Threats," 2024 UTC Telecom & Technology Conference
|05.21.24
"Armortext: When Your Communications Betray You, Where Do You Turn?," LS-ISAO New York Workshop, New York, NY
|04.04.24
"Arresting Disaster: Driving Incident Response in Cyber-Regulated Europe in an Age of AI Threats," Cyberevolution
|11.14.23
Financial Crimes Committee Quarterly Meeting, Bankers Association for Finance and Trade
|09.12.23
NH, KY Join Patchwork Of States' Data Privacy Laws ‘Squarely In The Middle’
|04.17.24
LegalTech News
- |
05.23.24
Crowell & Moring’s Data Law Insights
Impacts of the National Cybersecurity Strategy on Government and Private Sector Collaboration
|06.15.23
Crowell & Moring’s Data Law Insights
EPCA Compliance: What Appliance Manufacturers (and Importers) Need to Know
|02.21.19
Crowell & Moring's Retail & Consumer Products Law Observer
Colorado’s New Data Privacy Bill Increases Notification and Safeguarding Requirements
|07.17.18
Crowell & Moring's Data Law Insights
Seventh Circuit Revives Data Breach Case Despite No Evidence Of Monetary Harm
|04.24.18
Crowell & Moring's Data Law Insights
FERC Proposes to Require Expanded Cyber Security Incident Reporting
|01.17.18
Crowell & Moring's Data Law Insights
Privacy & Cybersecurity Weekly News Update – Week of August 28
|09.09.16
Crowell & Moring's Data Law Insights
Privacy & Cybersecurity Weekly News Update – Week of August 14
|09.01.16
Crowell & Moring's Data Law Insights
Privacy & Cybersecurity Weekly News Update Week of August 7
|08.19.16
Crowell & Moring's Data Law Insights
Matthew's Insights
Client Alert | 14 min read | 07.24.24
On Thursday, July 18, 2024, Judge Paul Engelmayer, U.S. District Judge for the Southern District of New York, dismissed the bulk of the Securities and Exchange Commission’s (SEC’s) landmark civil securities law claims against SolarWinds and its Chief Information Security Officer (CISO) Timothy Brown. The Court dismissed all allegations based on SolarWinds’ public disclosures made after SolarWinds became a victim of the well-publicized SUNBURST cybersecurity attack, and also dismissed the SEC’s claims relating to SolarWinds’ internal accounting controls and disclosure controls and procedures. However, the Court declined to dismiss claims of securities fraud against SolarWinds and its CISO based on SolarWinds’ pre-SUNBURST disclosures, finding that the SEC had properly pleaded that the company’s publicly-posted “Security Statement” was materially false and misleading.
Firm News | 4 min read | 06.24.24
Crowell Earns Top Rankings from Legal 500 United States 2024
Firm News | 4 min read | 06.04.24
ArmorText and Crowell & Moring Release New Open Source Cybersecurity Tabletop Exercises