Whistleblower News & Articles

Home > Whistleblower News & Articles > Bruce Judge Selected to Lawdragon 500 Leading Global Cyber Lawyers

Related Content

Whistleblower Law Collaborative Client Settles Landmark Cybersecurity False Claims Act Case

Whistleblower Law Collaborative LLC is pleased to announce that the United States has settled a False Claims Act case brought by one...

DOJ Seeks Cyber-Fraud Whistleblowers

In October 2021, the Department of Justice announced a new initiative seeking Cyber-Fraud Whistleblowers.  The initiative targets federal contractors who...

Largest-Ever Cybersecurity False Claims Act Settlement – $11.3 million

According to a recent government Press Release, Guidehouse Inc, headquartered in McLean, Virginia, and Nan McKay & Assoc. (Nan McKay),...

Settlement Announced Under the DOJ’s Civil Cyber-Fraud Initiative

The Department of Justice (DOJ) recently announced a civil cyber-fraud settlement by Jelly Bean Communications Design LLC (Jelly Bean) and...

What Potential Whistleblowers Need to Know About the New Department of Defense Rule (CMMC) for Contractor Cybersecurity

On October 11, 2024, the U.S. Department of Defense (DoD) took a major step to strengthen its contractors’ cybersecurity. The...

Bruce Judge Selected to Lawdragon 500 Leading Global Cyber Lawyers

May 5, 2025

Whistleblower Law Collaborative proudly announces that Lawdragon has named Bruce Judge as one of 500 Leading Global Cyber Lawyers.  It represents recognition of talent and accomplishment among lawyers who connect our digital world.

Over the past few years, the U.S. Government has prioritized cybersecurity; particularly in the Defense Industrial Base. Mr. Judge is at the forefront of using the Federal False Claims Act to enforce cybersecurity.

Mr. Judge spearheaded the first major False Claims Act cybersecurity settlement with a defense contractor.  This $4.6 million settlement with MORSECORP, Inc.  resolves allegations that it made false representations to the United States.  These false representations concerned compliance with required cybersecurity controls for safeguarding sensitive government information.

The MORSECORP settlement sends a clear signal that government contractors who fail to implement required cybersecurity controls can expect to face significant financial penalties. It also signals that individuals who bring cybersecurity violations to the government’s attention can receive a share of the government’s ultimate recoveries. Mr. Judge is honored to help clients bring these cases to the government’s attention.

Bruce Judge has a keen legal mind and the ability to grasp the nuances of the complicated area of cybersecurity compliance. His extensive past experience as a government prosecutor and his grasp of the area enables him to work effectively with government investigators and attorneys. His calm and thoughtful demeanor is reassuring to our whistleblower clients who take the risk of filing False Claims Act qui tam cases. The firm is grateful to have him as a Member.

–Suzanne Durrell, Managing Member

Prior to helping launch WLC, Bruce Judge spent 23 years as prosecutor with the Department of Justice, investigating, charging, trying, and convicting individuals and companies for financial crimes, obstruction of justice, public corruption, and other federal offenses. Mr. Judge is a regular presenter at legal conferences and law enforcement training sessions. In October 2024, he was a member of a panel convened by the Federal Bar Association to discuss lessons learned during the first three years of DOJ’s Civil Cyber-Fraud Initiative.

Whistleblower Law Collaborative devotes its practice entirely to representing whistleblowers. If you are aware of a situation in which a government contractor: 

  • Has failed to implement the cybersecurity controls required under NIST SP 800-171; 
  • Has failed to develop and implement a system security plan for any system or network used to process, store and/or transmit CUI or other sensitive government information or data; 
  • Is using third-party cloud-based services which services do not meet the relevant FedRamp security requirements; or 
  • Has posted misleading or inaccurate SPRS scores for its cybersecurity compliance. 

We urge you tocontact us for a free, confidential consultation.