Bad Tech Habits Every Lawyer Should Stop Doing: Preventing and mitigating cyber hacks, fraud schemes and ransomware
Danielle A. Ocampo is an Associate with the Data Security, Privacy & Technology practice group in Freeman Mathis & Gary's Orange County office. Danielle is a Certified Information Privacy Professional (CIPP/US) and Certified Information Privacy Manager (CIPM) with the International Association of Privacy Professionals (IAPP). Danielle advises and counsels clients for legal and operational guidance on privacy compliance. Danielle serves as incident response counsel to businesses nationwide.
Since 1998, Mark Bassingthwaighte, Esq., has been a Risk Manager with ALPS, the nation’s largest direct writer of lawyers’ malpractice insurance. In his tenure with the company, Mr. Bassingthwaighte has conducted over 1200 law firm risk management assessment visits; presented over 650 continuing legal education seminars throughout the United States; and written extensively on risk management, ethics, and cybersecurity.
3 hour CLE
Get this course, plus over 1,000+ live webinars.
Learn More
Program Summary
Session I – Quarterbacking Incident Response to Manage Cyber Risk & Litigation – Danielle Ocampo
As cyberattacks become more sophisticated, attorneys must be prepared not only to prevent them, but also to “quarterback” and respond effectively when incidents occur. This session offers practical insights from a legal and litigation defense perspective—highlighting how legal professionals and their clients can mitigate cyber and litigation risks, respond to fraud schemes and ransomwares, and navigate the aftermath of a breach while meeting ethical and regulatory obligations.
Key topics to be discussed:
- Common cyber-related litigation trends and how to minimize exposure
- Incident intake and insurance coverage
- Preventing and responding to social engineering attacks and possible wire fraud
- Quarterbacking restoration and recovery and forensics
- Post-Incident: Data breach notifications, regulatory reporting, forensics report?
- Practical tips for data handling and safeguarding network
- Implementing controls aligned with legal and professional responsibilities for risk management
- Incident response counsel’s role in third-party legal defense
Session II - 10 Sloppy Tech Habits Your Firm Needs to Break - Mark Bassingthwaighte
Few law firms seem to fully appreciate the level of risk attorneys and staff truly represent. As a user of firm technology, any individual’s actions can unintentionally circumvent the security tools IT support has deployed. For example, a poorly thought-out action in response to the wrong email, voicemail, or text message can be what enables a cyber breach to occur. Of course, the ultimate goal is to avoid having to deal with a cyber breach at all because actions that seek to prevent a breach are going to be easier and less stressful than any actions that must be taken to try and recover from the fallout of a breach. Unfortunately, it’s the ignorance and/or apathy of any individual user that can so easily prevent a firm from ever reaching that goal. This program will try to address this problem by focusing on how to secure the users of technology by creating awareness of how social engineering attacks occur and coupling that with passing along knowledge of how the attacks themselves can be circumvented.
Key topics to be discussed:
- An awareness of the numerous ways office computer networks can be breached
- An explanation as to why a firm’s efforts to prevent a breach can’t be left to IT support alone
- Knowledge of how wire fraud occurs to include practical tips on how to identify and avoid these scams
Session III - Cybersecurity: How to Protect Yourself and Keep the Hackers at Bay - Mark Bassingthwaighte
An attorney’s decision to use a computer tablet, a cloud-based service, a smart phone, a public Wi-Fi network, or a free email account in the furtherance of delivering legal services is not, in and of itself, unethical or necessarily a poor business decision. The real concern is with what the attorneys who use such tools do or don’t do with them. For example, portable devices, which includes backup drives, can be lost or stolen; rogue programs that capture banking passwords, encrypt your data, or steal your data can be unintentionally downloaded; and this list goes on and on. These kinds of breaches are often the result of common missteps such as lax security procedures, falling victim to a social engineering attack, and even simple ignorance about how a given device works or what a computer app or program really does. This ethics program will discuss various cyberattack vectors and share practical advice on how to manage the risk of a breach.
Key topics to be discussed:
- Identification of the basic steps one must take to try and prevent a network breach coupled with an understanding of an attorney’s ethical obligations to take such steps
- An understanding of backup best practices in light of ransomware threats
This course is co-sponsored with myLawCLE.
Date / Time: July 11, 2025
- 1:00 pm – 4:20 pm Eastern
- 12:00 pm – 3:20 pm Central
- 11:00 am – 2:20 pm Mountain
- 10:00 am – 1:20 pm Pacific
Closed-captioning available
Speakers
Danielle A. Ocampo | Freeman Mathis & Gary, LLP
Danielle A. Ocampo is an Associate with the Data Security, Privacy & Technology practice group in Freeman Mathis & Gary’s Orange County office. Danielle is a Certified Information Privacy Professional (CIPP/US) and Certified Information Privacy Manager (CIPM) with the International Association of Privacy Professionals (IAPP). Danielle advises and counsels clients for legal and operational guidance on privacy compliance. Danielle serves as incident response counsel to businesses nationwide. Danielle’s practice includes data privacy litigation from employee and consumer data breach and pixel tracking class actions and individual CIPA claims. Danielle is an Executive Committee member of the Bar Association of San Francisco’s (BASF) Cybersecurity and Privacy Law Section.
Throughout law school at Loyola Marymount University, Danielle interned in-house at Indeed.com and Intuitive Surgical, Inc. focusing on Data Privacy and Cybersecurity matters. Danielle’s first experience in-house was at Edwards Lifesciences as a Los Angeles Intellectual Property Law Association Diversity Fellow. Prior to law school, Danielle was a Business and Administrative Professional at Bayer’s agricultural tech arm The Climate Corporation. Before venturing into the Technology sector, Danielle was a Business Development Coordinator at the multinational law firm Paul Hastings LLP in the Bay Area where she advanced the business initiatives of the Employment Law practice and co-chaired the Asian affinity network for the Palo Alto office. Danielle joined Paul Hastings in 2017 as a Business Development Intern focused on client industry growth at the firm’s Los Angeles office. During this time, Danielle was also a full-time graduate student at the University of Southern California School of Public Policy where she earned her Master of Public Administration degree. Danielle graduated from the University of California Davis cum laude in 2016 with a B.A. double majoring in Political Science and International Relations with a minor in Managerial Economics.
Danielle is a Co-Director of Membership for the Board of the Filipino-American Bar Association of Northern California (FBANC). Since 2020, Danielle has served her community volunteering as a program chair for the National Federation of Filipino-American Associations’ youth leadership development program, Empowering Pilipino Youth through Collaboration.
Mark Bassingthwaighte | ALPS Insurance Agency
Since 1998, Mark Bassingthwaighte, Esq., has been a Risk Manager with ALPS, the nation’s largest direct writer of lawyers’ malpractice insurance. In his tenure with the company, Mr. Bassingthwaighte has conducted over 1200 law firm risk management assessment visits; presented over 650 continuing legal education seminars throughout the United States; and written extensively on risk management, ethics, and cybersecurity. Mr. Bassingthwaighte is a member of the State Bar of Montana as well as the American Bar Association where he currently sits on the ABA Center for Professional Responsibility’s Conference Planning Committee. He received his J.D. from Drake University Law School.
Agenda
Session I – Quarterbacking Incident Response to Manage Cyber Risk & Litigation | 1:00pm – 2:00pm
- Common cyber-related litigation trends and how to minimize exposure
- Incident intake and insurance coverage
- Preventing and responding to social engineering attacks and possible wire fraud
- Quarterbacking restoration and recovery and forensics
- Post-Incident: Data breach notifications, regulatory reporting, forensics report?
- Practical tips for data handling and safeguarding network
- Implementing controls aligned with legal and professional responsibilities for risk management
- Incident response counsel’s role in third-party legal defense
Break | 2:00pm – 2:10pm
Session II – 10 Sloppy Tech Habits Your Firm Needs to Break| 2:10pm – 3:10pm
- An awareness of the numerous ways office computer networks can be breached
- An explanation as to why a firm’s efforts to prevent a breach can’t be left to IT support alone
- Knowledge of how wire fraud occurs to include practical tips on how to identify and avoid these scams
Break | 3:10pm – 3:20pm
Session III – Cybersecurity: How to Protect Yourself and Keep the Hackers at Bay| 3:20pm – 4:20pm
Identification of the basic steps one must take to try and prevent a network breach coupled with an understanding of an attorney’s ethical obligations to take such steps
An understanding of backup best practices in light of ransomware threats
More CLE Webinars
Trending CLE Webinars
![The Litigator’s Guide to Evidentiary Objections: When to hold them and how to avoid mistakes (Including 1hr of Ethics) [2024 Edition]](https://miamidadebarcle.org/wp-content/uploads/2025/05/product_img_The-Litigators-Guide-to-Evidentiary-Objections-When-to-hold-them-and-how-to-avoid-mistakes-Including-1hr-of-Ethics-2024-Edition.jpg)
Upcoming CLE Webinars
© 2025 Miami Dade Bar