RESEARCH EXECUTIVE BRIEF — Cybersecurity Whistleblower Case Referral Services via Kirby Law Date: November 9, 2025 Prepared by: Business Intelligence Unit Purpose: Validate viability, quantify realistic revenue, and identify execution bottlenecks.

1. Market Context (Why This Works Now)

The False Claims Act (FCA) qui tam provisions and Dodd-Frank whistleblower bounty programs (SEC, CFTC, DOJ) have created a multi-billion dollar ecosystem. For cybersecurity specifically, the U.S. Department of Justice (DOJ) launched its National Cryptocurrency Enforcement Team (NCET) and announced a 2024–2025 focus on cyber-related fraud, particularly:

• Failures to meet CMMC (Cybersecurity Maturity Model Certification) under Department of Defense contracts.
• Misrepresentation of FedRAMP compliance for cloud services.
• False statements regarding SOC 2 or ISO 27001 certifications in government procurement.
• Data breach cover-ups that violate federal contract clauses or SEC disclosure rules.

Relevant Stat: The DOJ recovered $2.68 billion in FCA settlements and judgments in fiscal year 2024 (source: DOJ press release, Feb 2025). Cybersecurity-related qui tam filings are a small but growing fraction.

Referral market gap: Most whistleblower law firms (e.g., Constantine Cannon, Kohn Kohn & Colapinto) are generalists. Kirby Law can position itself as a niche intake filter, referring pre-vetted cyber cases to those firms or handling initial consultations and referring to national co-counsel—earning a referral fee (typically 10%–25% of attorney fees) or a flat per-case referral fee ($1,500–$5,000 for qualified leads).

2. Revenue Model Validation (Your Numbers Tested)

| Parameter | Your Assumption | Reality Check | |---|---|---| | Revenue per case | $750–$3,000 | Achievable. Flat referral fees for vetted leads average $1,000–$1,500 in practice. If Kirby Law writes the initial SEC/DOJ