Winston & Strawn faces $40m negligence lawsuit