Overview

Michael serves as a Partner of the Constangy Cyber Team and is located in Los Angeles. He has extensive experience managing responses to data security incidents, having focused his practice solely on managing them, as well as on helping clients to anticipate, understand, and proactively mitigate cyber risk, for more than four years. Michael has provided fully managed incident response services to hundreds of clients, of all sizes and in all industry sectors. In addition, he has in-depth experience working with cyber insurance carriers and brokers on various insights for insureds businesses. While pragmatically managing responses to data security incidents, Michael also provides clients with proactive data privacy and information security resources and training. He has unique insights on the importance of mitigating data privacy and security related liability due to his prior experience defending clients in civil litigations and regulatory investigations. In managing responses to data security incidents, Michael frequently facilitates digital forensics investigations, network restoration projects, and ransom negotiations. He regularly assesses, and helps clients to fulfill, consumer and regulatory notification obligations, liaises with law enforcement, advises on communications strategies, and helps clients to comply with applicable data privacy regulations.

Michael previously worked as a litigation associate at an AmLaw 100 firm in Los Angeles, specializing in healthcare related litigation.  He graduated from Thomas Jefferson School of Law in 2016, summa cum laude, and prior to that obtained his Bachelor of Arts degree from the University of Arizona.

Representative Matters

Representative Matters

  • Coordinated incident response services for hundreds of clients, of all sizes and in all industry sectors (including, for example, healthcare, insurance, financial services, real estate, technology, retail, construction, and manufacturing), to assist them in recovering from, investigating, and responding to cybersecurity and data privacy incidents. Such incidents have included network intrusions, ransomware encryption and data extortion attacks, business email compromises, fraudulent wire transfer schemes, data loss/theft events, and internal threats, among others.
  • Provided fully managed incident response services to a social media services company that fell victim to a ransomware attack. This included, among other things, the identification of resources to assist with network restoration, the facilitation and management of a complex forensic investigation, the provision of strategic guidance with respect to external communications and threat actor negotiations, and the identification and fulfillment of applicable notification/reporting obligations, including to current/former employees, members of the public, and regulators.
  • Developed and executed strategy for a nonprofit, medical billing services company to respond to a widespread business email compromise impacting employee personal information and patient-protected health information. This included, among other things, the facilitation and management of a complex forensic investigation, the identification and fulfillment of applicable notification/reporting obligations, the provision of defense services in response to a related class action lawsuit, and the preparation and coordination of responses to follow-on regulatory inquiries.
  • Guided the incident response efforts of an insurance agency in connection with a business email compromise resulting in the wire transfer of nearly $8,000,000 to a fraudulent bank account in Hong Kong. This included the coordination of funds recovery efforts involving the Federal Bureau of Investigation and relevant banking institutions, as well as the provision of communications guidance with respect to stakeholders associated with the transaction.
  • Defended several class action lawsuits involving insureds across numerous industries attendant to data breach allegations and/or pixel tracking matters.
  • Actively researched and analyzed difficult legal issues as part of team investigations and litigations. Drafted related memoranda, pleadings, motions, briefs, and reports of findings.
  • Interviewed critical fact and expert witnesses and drafted summaries, affidavits, and reports. Participated in and directed depositions. Presented and argued in open court, and conducted examinations and cross-examinations.
  • Managed the logistics of discovery for a number of cases, including several that involved foreign witnesses and documents. Oversaw a team of lawyers, negotiated with opposing counsel, collaborated with co-defense attorneys, and advocated for clients in discovery disputes.

Practice Emphasis

  • Healthcare
  • Business & Financial Transactions
  • Cybersecurity & Data Privacy
  • Complex Tort & General Casualty
  • Professional Liability
  • General Liability

Industries

Education

Thomas Jefferson School of Law

  • J.D., summa cum laude, 2016

University of Arizona

  • B.A., Political Science, 2012

Bar & Court Admissions

  • California, 2016
  • U.S. District Court for the Central District of California
  • U.S. District Court for the Northern District of California
  • U.S. District Court for the Northern District of Georgia
Back to Page