In the recent data breach litigation of Savidge et al v. Pharm-Save, Inc. et al, W.D. Ky. 2023, the role of the Cybersecurity Expert Witness was pivotal in addressing complex questions of negligence and causation following a significant compromise of employee data. This case provides a clear illustration of how courts scrutinize the reliability and admissibility of expert testimony in cybersecurity matters.
Background and Parties
Plaintiffs Andrea Savidge and Beth Lynch, both former employees of Pharm-Save, Inc., initiated suit after a data breach resulted in the unauthorized disclosure of sensitive personal information. The breach occurred when cybercriminals, posing as company executives, deceived Pharm-Save employees into releasing confidential data. Plaintiffs alleged that Pharm-Save failed to implement adequate cybersecurity protocols, thereby enabling the breach and exposing employees to risk.


