Bad Tech Habits Every Lawyer Should Stop Doing: Preventing and mitigating cyber hacks, fraud schemes and ransomware

Danielle A. Ocampo
Danielle A. Ocampo
Freeman Mathis & Gary, LLP

Danielle A. Ocampo is an Associate with the Data Security, Privacy & Technology practice group in Freeman Mathis & Gary's Orange County office. Danielle is a Certified Information Privacy Professional (CIPP/US) and Certified Information Privacy Manager (CIPM) with the International Association of Privacy Professionals (IAPP). Danielle advises and counsels clients for legal and operational guidance on privacy compliance.

Mark Bassingthwaighte
Mark Bassingthwaighte
ALPS Insurance Agency

Since 1998, Mark Bassingthwaighte, Esq., has been a Risk Manager with ALPS, the nation’s largest direct writer of lawyers’ malpractice insurance. In his tenure with the company, Mr. Bassingthwaighte has conducted over 1200 law firm risk management assessment visits; presented over 650 continuing legal education seminars throughout the United States; and written extensively on risk management, ethics, and cybersecurity.

Live Video-Broadcast: July 11, 2025

3 hour CLE

Tuition: $245.00
Subscribe to Federal Bar Association CLE Pass...
Co-Sponsored by myLawCLE
Get this course, plus over 1,000+ of live webinars.
Learn More
Training 5 or more people?

Sign-up for a law firm subscription plan and each attorney in the firm receives free access to all CLE Programs

Program Summary

Session I – Quarterbacking Incident Response to Manage Cyber Risk & Litigation – Danielle Ocampo

As cyberattacks become more sophisticated, attorneys must be prepared not only to prevent them, but also to “quarterback” and respond effectively when incidents occur. This session offers practical insights from a legal and litigation defense perspective—highlighting how legal professionals and their clients can mitigate cyber and litigation risks, respond to fraud schemes and ransomwares, and navigate the aftermath of a breach while meeting ethical and regulatory obligations.

Key topics to be discussed:

  • Common cyber-related litigation trends and how to minimize exposure
  • Incident intake and insurance coverage
  • Preventing and responding to social engineering attacks and possible wire fraud
  • Quarterbacking restoration and recovery and forensics
  • Post-Incident: Data breach notifications, regulatory reporting, forensics report?
  • Practical tips for data handling and safeguarding network
  • Implementing controls aligned with legal and professional responsibilities for risk management
  • Incident response counsel’s role in third-party legal defense

Session II - 10 Sloppy Tech Habits Your Firm Needs to Break- Mark Bassingthwaighte

Few law firms seem to fully appreciate the level of risk attorneys and staff truly represent. As a user of firm technology, any individual’s actions can unintentionally circumvent the security tools IT support has deployed. For example, a poorly thought-out action in response to the wrong email, voicemail, or text message can be what enables a cyber breach to occur. Of course, the ultimate goal is to avoid having to deal with a cyber breach at all because actions that seek to prevent a breach are going to be easier and less stressful than any actions that must be taken to try and recover from the fallout of a breach. Unfortunately, it’s the ignorance and/or apathy of any individual user that can so easily prevent a firm from ever reaching that goal. This program will try to address this problem by focusing on how to secure the users of technology by creating awareness of how social engineering attacks occur and coupling that with passing along knowledge of how the attacks themselves can be circumvented.

Key topics to be discussed:

  • An awareness of the numerous ways office computer networks can be breached
  • An explanation as to why a firm’s efforts to prevent a breach can’t be left to IT support alone
  • Knowledge of how wire fraud occurs to include practical tips on how to identify and avoid these scams

Session III - Cybersecurity: How to Protect Yourself and Keep the Hackers at Bay- Mark Bassingthwaighte

An attorney’s decision to use a computer tablet, a cloud-based service, a smart phone, a public Wi-Fi network, or a free email account in the furtherance of delivering legal services is not, in and of itself, unethical or necessarily a poor business decision. The real concern is with what the attorneys who use such tools do or don’t do with them. For example, portable devices, which includes backup drives, can be lost or stolen; rogue programs that capture banking passwords, encrypt your data, or steal your data can be unintentionally downloaded; and this list goes on and on. These kinds of breaches are often the result of common missteps such as lax security procedures, falling victim to a social engineering attack, and even simple ignorance about how a given device works or what a computer app or program really does. This ethics program will discuss various cyberattack vectors and share practical advice on how to manage the risk of a breach.

Key topics to be discussed:

  • Identification of the basic steps one must take to try and prevent a network breach coupled with an understanding of an attorney’s ethical obligations to take such steps
  • An understanding of backup best practices in light of ransomware threats

This course is co-sponsored with myLawCLE. 

Date / Time: July 11, 2025

  • 1:00 pm – 4:20 pm Eastern
  • 12:00 pm – 3:20 pm Central
  • 11:00 am – 2:20 pm Mountain
  • 10:00 am – 1:20 pm Pacific

Closed-captioning available

Speakers

Danielle Ocampo_FedBarDanielle A. Ocampo | Freeman Mathis & Gary, LLP

Danielle A. Ocampo is an Associate with the Data Security, Privacy & Technology practice group in Freeman Mathis & Gary’s Orange County office. Danielle is a Certified Information Privacy Professional (CIPP/US) and Certified Information Privacy Manager (CIPM) with the International Association of Privacy Professionals (IAPP). Danielle advises and counsels clients for legal and operational guidance on privacy compliance. Danielle serves as incident response counsel to businesses nationwide. Danielle’s practice includes data privacy litigation from employee and consumer data breach and pixel tracking class actions and individual CIPA claims. Danielle is an Executive Committee member of the Bar Association of San Francisco’s (BASF) Cybersecurity and Privacy Law Section.

Throughout law school at Loyola Marymount University, Danielle interned in-house at Indeed.com and Intuitive Surgical, Inc. focusing on Data Privacy and Cybersecurity matters. Danielle’s first experience in-house was at Edwards Lifesciences as a Los Angeles Intellectual Property Law Association Diversity Fellow. Prior to law school, Danielle was a Business and Administrative Professional at Bayer’s agricultural tech arm The Climate Corporation. Before venturing into the Technology sector, Danielle was a Business Development Coordinator at the multinational law firm Paul Hastings LLP in the Bay Area where she advanced the business initiatives of the Employment Law practice and co-chaired the Asian affinity network for the Palo Alto office. Danielle joined Paul Hastings in 2017 as a Business Development Intern focused on client industry growth at the firm’s Los Angeles office. During this time, Danielle was also a full-time graduate student at the University of Southern California School of Public Policy where she earned her Master of Public Administration degree. Danielle graduated from the University of California Davis cum laude in 2016 with a B.A. double majoring in Political Science and International Relations with a minor in Managerial Economics.

Danielle is a Co-Director of Membership for the Board of the Filipino-American Bar Association of Northern California (FBANC). Since 2020, Danielle has served her community volunteering as a program chair for the National Federation of Filipino-American Associations’ youth leadership development program, Empowering Pilipino Youth through Collaboration.

 

Mark Bassingthwaighte | ALPS Insurance Agency

Since 1998, Mark Bassingthwaighte, Esq., has been a Risk Manager with ALPS, the nation’s largest direct writer of lawyers’ malpractice insurance. In his tenure with the company, Mr. Bassingthwaighte has conducted over 1200 law firm risk management assessment visits; presented over 650 continuing legal education seminars throughout the United States; and written extensively on risk management, ethics, and cybersecurity. Mr. Bassingthwaighte is a member of the State Bar of Montana as well as the American Bar Association where he currently sits on the ABA Center for Professional Responsibility’s Conference Planning Committee. He received his J.D. from Drake University Law School.

Agenda

Session I – Quarterbacking Incident Response to Manage Cyber Risk & Litigation | 1:00pm – 2:00pm

  • Common cyber-related litigation trends and how to minimize exposure
  • Incident intake and insurance coverage
  • Preventing and responding to social engineering attacks and possible wire fraud
  • Quarterbacking restoration and recovery and forensics
  • Post-Incident: Data breach notifications, regulatory reporting, forensics report?
  • Practical tips for data handling and safeguarding network
  • Implementing controls aligned with legal and professional responsibilities for risk management
  • Incident response counsel’s role in third-party legal defense

Break | 2:00pm – 2:10pm

Session II – 10 Sloppy Tech Habits Your Firm Needs to Break| 2:10pm – 3:10pm

  • An awareness of the numerous ways office computer networks can be breached
  • An explanation as to why a firm’s efforts to prevent a breach can’t be left to IT support alone
  • Knowledge of how wire fraud occurs to include practical tips on how to identify and avoid these scams

Break | 3:10pm – 3:20pm

Session III – Cybersecurity: How to Protect Yourself and Keep the Hackers at Bay| 3:20pm – 4:20pm

  • Identification of the basic steps one must take to try and prevent a network breach coupled with an understanding of an attorney’s ethical obligations to take such steps
  • An understanding of backup best practices in light of ransomware threats

Credits

Alaska

Approved for CLE Credits
3 General

Our programs are CLE-eligible through Alaska’s recognition of multi-jurisdictional reciprocity.
Alabama

Pending CLE Approval
3 General

Arkansas

Approved for CLE Credits
3 General

Arizona

Approved for CLE Credits
3 General

California

Approved for CLE Credits
3 General

Colorado

Pending CLE Approval
3 General

Connecticut

Approved for CLE Credits
3 General

District of Columbia

No MCLE Required
3 CLE Hour(s)

Delaware

Pending CLE Approval
3 General

Florida

Approved via Attorney Submission
3.5 General Hours

Receive CLE credit in Florida via attorney submission.
Georgia

Pending CLE Approval
3 General

Hawaii

Approved for CLE Credits
3.6 General

Iowa

Pending CLE Approval
3 General

Idaho

Pending CLE Approval
3 General

Illinois

Pending CLE Approval
3 General

Indiana

Pending CLE Approval
3 General

Kansas

Pending CLE Approval
3 Substantive

Kentucky

Pending CLE Approval
3 General

Louisiana

Pending CLE Approval
3 General

Massachusetts

No MCLE Required
3 CLE Hour(s)

Maryland

No MCLE Required
3 CLE Hour(s)

Maine

Pending CLE Approval
3 General

Michigan

No MCLE Required
3 CLE Hour(s)

Minnesota

Pending CLE Approval
3 General

Missouri

Approved for CLE Credits
3.6 General

Mississippi

Pending CLE Approval
3 General

Montana

Pending CLE Approval
3 General

North Carolina

Pending CLE Approval
3 General

North Dakota

Approved for CLE Credits
3 General

Our programs are CLE-eligible through North Dakota’s recognition of multi-jurisdictional reciprocity. Section 1, Policy 1.14
Nebraska

Pending CLE Approval
3 General

myLawCLE reports attendance to Nebraska on each attorney’s behalf for all programs. Please do not self-report.
New Hampshire

Approved for CLE Credits
180 General minutes

As of July 1, 2014, the NHMCLE Board no longer provides pre- or post-approval of courses. Attendees must self-determine whether a program is eligible for credit, and self-report their attendance online at www.nhbar.org, based on qualification provisions of Rule 53.
New Jersey

Approved for CLE Credits
3.6 General

Our programs are CLE-eligible through New Jersey’s recognition of multi-jurisdictional reciprocity, except for the courses required under BCLE Reg. 201:2
New Mexico

Approved for CLE Credits
3 General

Nevada

Pending CLE Approval
3 General

New York

Approved for CLE Credits
3.6 General

Our programs are CLE-eligible through New York’s Approved Jurisdiction Group “B”.
Ohio

Pending CLE Approval
3 General

Oklahoma

Pending CLE Approval
3.5 General

Oregon

Pending CLE Approval
3 General

Pennsylvania

Approved for CLE Credits
3 General

Rhode Island

Pending CLE Approval
3.5 General

South Carolina

Pending CLE Approval
3 General

South Dakota

No MCLE Required
3 CLE Hour(s)

Tennessee

Pending CLE Approval
3 General

Texas

Approved for CLE Credits
3 General

Utah

Pending CLE Approval
3 General

Virginia

Not Eligible
3 General Hours

Vermont

Approved for CLE Credits
3 General

Washington

Approved via Attorney Submission
3 Law & Legal Hours

Receive CLE credit in Washington via attorney submission.
Wisconsin

Pending CLE Approval
3.6 General

West Virginia

Pending CLE Approval
3.6 General

Wyoming

Pending CLE Approval
3 General

More CLE Webinars
Upcoming CLE Webinars
Obtaining and Using Social Media Evidence (2025 Edition)
Obtaining and Using Social Media Evidence (2025 Edition) Mon, June 30, 2025
On-Demand
Live Replay
Wedding & Event Vendor Law 101 (2025 Edition)
Wedding & Event Vendor Law 101 (2025 Edition) Mon, June 30, 2025
On-Demand
Live Replay
Sketching Legacies: A guide to drafting wills and trusts
Sketching Legacies: A guide to drafting wills and trusts Thu, July 17, 2025
On-Demand
Live Replay
Single Member LLCs: Avoiding Risks and Seizing Opportunities
Single Member LLCs: Avoiding Risks and Seizing Opportunities Thu, July 17, 2025
On-Demand
Live Replay
PTSD 101: What attorneys should know (2024 Edition)
PTSD 101: What attorneys should know (2024 Edition) Fri, July 18, 2025
On-Demand
Live Replay
Microsoft Excel for Lawyers (2024 Edition)
Microsoft Excel for Lawyers (2024 Edition) Tue, July 22, 2025
On-Demand
Live Replay
Microsoft Copilot AI tool for Lawyers (Part 2)
Microsoft Copilot AI tool for Lawyers (Part 2) Thu, July 31, 2025
Live Webcast