Careers

Diversity

With 17 offices, from New York to Los Angeles and Seattle to Orlando, we live and work in communities all over the U.S., collaborating across locations, disciplines and even borders. Our experienced, highly ranked lawyers serve businesses wherever they are and wherever they want to go.

Offices

About Us

Pages

Professionals

Thought leadership: blogs, podcasts, videos, publications, events and news

Insights

Services

Pro Bono

Am Law 100 firm with practices in Business, Digital Assets and Data Management, Intellectual Property, Labor & Employment, Litigation and Tax.

Home | BakerHostetler

Ronald Baumgarten Expects Upcoming Trade Policies to be Similar to Last Republican Administration

Patrick Campbell, Jonathan New Author Law360 Article on Whistleblower Programs

DOJ Antitrust Division Adds to Guidance on the Evaluation of Corporate Compliance Programs in Criminal Antitrust Investigations

BakerHostetler Alumni Newsletter – Fall 2024

Ed counsels clients, leads investigations and litigates matters focused on cybersecurity, privacy, digital media, criminal, national security, commercial, employment, governance and intellectual property issues. He moves seamlessly between boardroom crisis management, digital investigation and courtroom presentation to mitigate liability or to enforce legal rights and remedies. He also advises clients on Internet speech issues, as well as governmental demands for data and assistance in regulatory, civil and criminal investigations.

A former federal cybercrime prosecutor and National Security Cyber Specialist at the U.S. Department of Justice, Ed has handled a multitude of high-profile, complex and sensitive investigations, trials and appeals. He has extensive experience with hacking; ransomware; identity and intellectual property theft; cyber extortion; cyberstalking, defamation, harassment and threats; terrorism and domestic extremism; online child exploitation; financial, government contracting and tax fraud; money laundering; obstruction of justice; public corruption; and human, narcotics and firearms trafficking.

Ed has been recognized as a “Cybersecurity and Data Privacy Trailblazer” by National Law Journal and has received various awards from law enforcement agencies for his work on behalf of victims of cybercrime. He is a regular commentator, presenter and author on issues related to cybersecurity, digital privacy, cybercrime and Internet safety.

Ed is the Digital Assets and Data Management Office Lead for the Philadelphia office.

core/freeform

J.D., The Catholic University of America, Columbus School of Law, 1995, 

B.A., The College of New Jersey, 1992, 

<ul>
<li>The Best Lawyers in America®
<ul>
<li>Pennsylvania: Technology Law (2023 to 2025)</li>
</ul>
</li>
<li>U.S. Department of Justice: Director&#8217;s Award (2019)</li>
<li>The Legal 500 United States
<ul>
<li>Recommended in Cyber Law (including Data Privacy and Data Protection) (2020 to 2021)</li>
<li>Recommended in Data Privacy and Data Protection (2020)</li>
<li>Recommended in Financial Services Regulation (2017)</li>
</ul>
</li>
<li>The National Law Journal: Cybersecurity and Data Privacy Trailblazer (2015)</li>
<li>Federal Bureau of Investigation: Director&#8217;s Special Recognition Award (2015)</li>
<li>U.S. Immigration and Customs Enforcement, U.S. Department of Homeland Security, Homeland Security Investigations: Exemplary Partnership Award (2015)</li>
<li>U.S. Immigration and Customs Enforcement, U.S. Department of Homeland Security: Director&#8217;s Award (2013)</li>
<li>U.S. Department of Justice: Assistant Attorney General&#8217;s Award for Outstanding Advocacy in Protecting Citizens from Online Crime (2008)</li>
</ul>

Philadelphia

Wilmington

Ed McAndrew Debates Federal Crackdowns on Cybercrime

Ed McAndrew Speaks to Multiple Outlets About Uber Cybersecurity Chief Sentencing

Ed McAndrew Calls Sentence of Former Uber Cyber Security Chief ‘Chilling’

Ed McAndrew Discusses Privacy and Cybersecurity Insurance at Sedona Conference

David Sherman and Ed McAndrew Address Cyber Incident Response at Tech Institute

Key Takeaways from the US National Cybersecurity Strategy

Ed McAndrew Quoted in Article About ChatGPT’s Use in Criminal Acts

Ed McAndrew Quoted About Increasing Scrutiny of Companies’ Cyber Risks

Ed McAndrew Offers Tips for Working with the FBI at Incident Response Forum

Ed McAndrew Quoted in Two Articles on Current Issues in Cybersecurity

Ed McAndrew Discusses Limiting Risk and Liability in Incident Response

Ed McAndrew Discusses Catfishing on the Getting Schooled Podcast

Ed McAndrew Quoted About Individual Liability in Data Breach Response

Former Uber Chief Security Officer Convicted of Federal Obstruction and  Concealment Crimes in Connection with Extortionate Data Breach

Ed McAndrew Quoted About Impact of Former Uber Executive’s Conviction

Ed McAndrew Quoted in Global Data Review Regarding N.Y. Ransomware and Transparency Proposals

Ed McAndrew Quoted in The Washington Post on DOJ’s Cyber Review Report

​​​​​​​Ed McAndrew Featured in Law360 Profile

Data Counsel

Welcome Partner Ed McAndrew to the DADM Group

BakerHostetler Expands Cybersecurity Practice With Addition of  Former Federal Cybercrime Prosecutor Edward J. McAndrew

White Collar, Investigations and Securities Enforcement and Litigation

Digital Assets and Data Management

Digital Risk Advisory and Cybersecurity

Privacy and Digital Risk Class Action and Litigation

Post-Roe Resource Center

Crisis Management, Investigations and Litigation
<ul>
<li>Counseling and representation of companies in ransomware/data theft “double extortion” attacks, and in related investigations, litigation and alternative dispute resolution. Client sectors include advertising, consulting, digital media and entertainment, education, energy, financial services, gaming, government contracting, healthcare, hotel and leisure, insurance, legal services, life sciences, logistics, manufacturing, professional services, retail, social media, sports, technology, telecommunications and transportation.</li>
<li>Counseling and representation of entities in various sectors in privacy class action litigation alleging wiretapping and related claims based on online tracking and session replay technologies.</li>
<li>Representation of central witness in congressional investigations and House Impeachment Inquiry regarding the President of the United States and his family members.</li>
<li>Counseling and representation of Software as a Service (SaaS) provider in responding to advanced persistent cyberattacks impacting financial information for millions of U.S. citizens and related regulatory investigations, class action and commercial litigation.</li>
<li>Counseling and representation of U.S. hospital in response to operationally disruptive ransomware attack and subsequent civil litigation alleging related patient death.</li>
<li>Represented IT managed service provider in response to ransomware attack on U.S. city and successful settlement of related civil disputes.</li>
<li>Counseling and representation of companies in various sectors in business email compromise, payment and payroll re-direction schemes, and representation in related governmental investigations and civil litigation in multiple jurisdictions.</li>
<li>Representation of cybersecurity company in privacy litigation under New Jersey’s Daniel’s Law prohibiting disclosures of contact information for judges, prosecutors and law enforcement agents.</li>
<li>Defense of consumer electronics retailer in data breach class action resulting from a payment card breach involving millions of customers.</li>
<li>Representation of parties in federal grand jury investigations and criminal actions focused on allegations of political corruption and financial and tax fraud by individuals related to the U.S. presidential administration.</li>
<li>Conducted internal investigation of potential malfeasance by Chief Information Security Officer of financial institution.</li>
<li>Defense of fraud and breach of fiduciary duty litigation against an international digital entertainment streaming service.</li>
<li>Defense of a consumer goods logistics company in computer fraud and intellectual property theft litigation.</li>
<li>Counseling and representation of media, entertainment and sports organizations and individuals victimized by technology-facilitated defamation, extortion, cyberstalking, online threats and fraud.</li>
<li>Counseling and representation of organizations in various sectors in responding to governmental demands for third-party data and assistance under FISA, ECPA and the CLOUD Act.</li>
<li>Representation of a global life sciences company as the victim in a federal criminal investigation and prosecution relating to the theft of more than $1 billion in intellectual property by internal and external cyber actors located in multiple countries.</li>
<li>Conducted internal investigations of whistleblower claims regarding cybersecurity and privacy law compliance issues for public companies.</li>
<li>Defense of national retailer in data breach class action resulting from payment card breach involving more than 500,000 customers.</li>
<li>Represented global life sciences company as the victim in a federal digital advertising fraud prosecution of international cybercriminals.</li>
<li>Representation of manufacturing company in civil and criminal litigation relating to hacking and theft of intellectual property by a competitor.</li>
<li>Defense of hotel and casino in an employee data breach class action alleging fraud due to personal information compromise.</li>
<li>Counseling and representation of insurance services company in cyber incident and resulting grand jury investigation/prosecution of financial fraud relating to high-profile natural gas disaster.</li>
<li>Secured one of the first decisions in the U.S. dismissing privacy and defamation claims against a website for publishing third-party content under Section 230 of the Communications Decency Act.</li>
<li>Successfully represented national supermarket chain in civil litigation relating to invasion of privacy, consumer fraud and newsgathering torts by major television broadcasting network.</li>
<li>Representation of a federal defense contractor as the victim in criminal and national security investigations relating to nation-state cyberattacks targeting export-controlled intellectual property.</li>
<li>Investigation of nation-state advanced persistent cyberattacks on a global business technology and Internet infrastructure company.</li>
<li>Defense of university and settlement of all claims relating to alleged cyberattack on virtual currency managed services provider.</li>
<li>Successful defense of nationally prominent membership organization in defamation, invasion of privacy and civil rights action filed by an expelled member following national media coverage of his involvement in domestic extremist and white supremacist groups.</li>
<li>Successfully represented publicly traded media company, as plaintiff, in arbitrations involving more than $500 million in broadcasting, intellectual property, advertising and corporate ownership rights relating to digital media technology.</li>
<li>Defended global technology company in theft of trade secrets case involving recruitment of a competitor’s Internet technology development team and alleging more than $1 billion in damages.</li>
<li>Successfully represented mortgage purchaser in litigation related to $43 million mortgage fraud scheme.</li>
<li>Conducted internal investigations for boards of organizations relating to allegations of financial fraud and political corruption.</li>
<li>Represented plaintiffs in election fraud litigation on ballot referendum.</li>
<li>Litigated a successful First Amendment challenge to federal commercial casino advertising ban through Supreme Court.</li>
</ul>
Technology Law Counseling
<ul>
<li>Advise media companies on potential civil and criminal liability related to technology-facilitated newsgathering by journalists.</li>
<li>Advise social media apps on content moderation policies and procedures relating to digital threats, domestic extremism and Internet crimes against children.</li>
<li>Advised European government on proposed legislation relating to the monitoring and reporting of extremist activity and Internet crimes against children by electronic communication services.</li>
<li>Advised European government agency, global financial services, logistics, automotive and other companies on U.S. law enforcement and global privacy issues related to the Wiretap Act, Stored Communications Act and CLOUD Act.</li>
<li>Advise various cybersecurity companies on legal issues relating to proactive monitoring, threat hunting, intelligence gathering, incident response, forensic investigation, data analysis, law enforcement interaction and service as expert witnesses in litigation.</li>
<li>Counseling and training of organizations, directors, officers and employees relating to technology-facilitated defamation, extortion, cyberstalking, threats, domestic extremism and other criminal activity.</li>
<li>Advise various public companies on cybersecurity governance and securities law disclosures relating to cyber risk and cyber incidents.</li>
</ul>
Prosecutorial Experience
<ul>
<li>First U.S. prosecution of foreign hackers for theft of trade secrets from American companies. Coordinated three-year multinational investigations and successful prosecutions of international hacking and data theft ring that breached the networks of a leading global technology company, various software supply chain companies and the U.S. Army, stealing thousands of identities and intellectual property valued in the billions of dollars.</li>
<li>First U.S. convictions for cyberstalking resulting in death. Convicted three members of a cyberstalking conspiracy resulting in an active shooting and multiple deaths in Delaware’s largest courthouse.</li>
<li>Convicted a foreign member of an international cybercrime organization of cybertheft, cracking and distribution of more than $100 million in commercial software owned by more than 200 technology companies to buyers in 28 states and more than 60 countries.</li>
<li>Led international online undercover investigations that infiltrated dark web networks, resulting in the identification and prosecution of thousands of suspects engaged in child exploitation and trafficking crimes, and the rescue of hundreds of child sexual abuse victims.</li>
<li>Convicted an individual in a witness intimidation and obstruction of justice case involving use of a mobile device and Facebook to threaten a government witness from a courtroom during a murder-for-hire and drug trafficking trial. Arrest made in courtroom during trial.</li>
<li>Convicted chief scientist of a defense and law enforcement contractor of cybercrime conspiracy involving use of cracked software obtained from international cybercriminals to design components used in Marine One presidential helicopters, Blackhawk helicopters, Patriot missiles, police radar and breath analysis equipment.</li>
<li>Investigated data breaches of an IT enterprise solutions and cloud services provider, resulting in the compromise of systems and sensitive data of more than 50 entities and hundreds of millions of individuals.</li>
<li>Investigated money laundering and Bank Secrecy Act violations involving the use of stolen source code for online gaming platforms and popular video games to unlawfully mine, commoditize and sell virtual currencies on black markets.</li>
<li>Prosecuted a hacker for cyberstalking of a federal prosecutor.</li>
<li>Investigated cybercrime ring engaged in the hacking of social media accounts of federal judges.</li>
<li>Investigated and prosecuted hundreds of individuals for online child exploitation crimes, including:
<ul>
<li>Local, state and federal law enforcement officers</li>
<li>Teachers, professors and other school/university employees</li>
<li>Youth group leaders, camp counsellors and sports coaches</li>
<li>Priests, ministers and other church employees</li>
<li>Healthcare providers and lawyers</li>
<li>Employees, including senior executives, of various companies</li>
<li>Military personnel deployed in Operation Enduring Freedom and Operation Iraqi Freedom</li>
<li>Senior military and intelligence personnel and contractors stationed at the Pentagon, CIA, Dover Air Force Base and abroad</li>
</ul>
</li>
<li>Convicted a website operator of cybertheft and online distribution of more than 24,000 copies of software products manufactured by at least 80 companies to thousands of customers.</li>
<li>Conducted international investigation into a series of distributed denial-of-service (DDoS) attacks against major financial institutions.</li>
<li>Investigated data breaches and theft of hundreds of thousands of identities from multiple financial, educational and governmental computer networks by foreign-based hackers.</li>
<li>Convicted members of an Internet-based tax-fraud conspiracy centered on electronic submission of more than 450 tax returns using more than 60 different Internet service accounts and 130 financial accounts.</li>
<li>Convicted a leader of an identity theft and bank-fraud conspiracy involving digital check fraud using hundreds of stolen identities.</li>
<li>Successfully litigated media right-of-access issues relating to courtroom testimony and evidence presentation in cybercrime trials.</li>
<li>Prosecuted cyberstalking campaign involving email account hijacking and online defamation and dissemination of private, explicit videos.</li>
<li>Convicted a disgruntled employee of a domestic terrorism offense for mailing fake anthrax to a prominent media organization.</li>
</ul>

Edward J. McAndrew

Edward J. McAndrew

Experience

Recognitions and Memberships

Insights and News

Prior Positions

Credentials

Community and Pro Bono

Areas of Focus

Services

Featured Insights