Naomi Pen

Naomi provides clients strategic support through every stage of the incident response lifecycle during high-stakes cybersecurity events, including ransomware and data-extortion attacks, nation-state intrusions, cyber fraud, and data breaches. She works with clients to lead investigations, coordinate with forensic firms, law enforcement, and regulatory bodies, as well as advise on breach notification and reporting obligations.

Naomi represents clients in regulatory investigations and enforcement matters arising from cybersecurity incidents and security practices. She defends companies against enforcement actions brought by federal and state regulators, including state attorneys general and state financial regulators, and helps manage associated regulatory and litigation risk. She advises on U.S. federal and state cybersecurity laws, and emerging state AI frameworks. Where the law is developing and precedent is scarce, she delivers practical, business-focused counsel.

To help clients prepare before an incident occurs, Naomi advises on and tailored incident response, vulnerability management, and insider-threat programs, conducts tabletop exercises, and provides counsel on cyber governance and board oversight. Her clients include sophisticated companies across technology, financial services, life sciences, and energy, and she collaborates closely with the firm's privacy, AI, enforcement, and litigation teams.

Before practicing law, Naomi worked in fixed income trading technology. She draws on that background when advising on technical compliance risks and collaborating with technical and forensic teams. During law school, she externed at the Center for Reproductive Rights, focusing on privacy within international human rights.