Andrew S. Pak

Andrew S. Pak draws on his experience as a former federal prosecutor with the U.S. Department of Justice (DOJ) and as in-house counsel to a global Fortune 500 financial institution to advise clients on issues ranging from cybersecurity risk, incident response, and privacy to litigation, internal investigations, and regulatory matters. As a Certified Information Systems Security Professional (CISSP), Andrew's skill set includes both legal and practitioner-level knowledge and experience on cybersecurity issues.

Andrew is a former assistant U.S. attorney and cybercrime coordinator for the U.S. Attorney's Office for the District of New Jersey, where he litigated malicious hacking cases and fraud-related matters. In this role, he prosecuted the largest computer hacking and securities fraud scheme charged to date, the largest credit card hacking case charged to date, and an international stock manipulation scam involving botnets. Andrew also previously served as senior trial counsel at the DOJ Computer Crime and Intellectual Property Section, where he prosecuted cybercrime matters, coordinated national DOJ litigation strategy relating to email search warrants, and worked on policy and legislative matters.

Andrew offers a perspective that bridges the gap between the law and technology and has helped clients navigate sensitive interactions with regulatory agencies, law enforcement, and in connection with internal investigations. He has represented clients before Cyber Safety Review Board, the New York Department of Financial Services, and other regulatory agencies. Andrew has deep experience managing incident responses and conducting risk assessments for companies of all sizes, ranging from startups to Fortune 500 companies.