Mullen Coughlin, Cybersecurity & Data Privacy

Mullen Coughlin welcomed David Moncure, CIPP/US as a Partner to its Litigation practice group. David brings over two decades of extensive in-house and law firm data privacy, eDiscovery, cybersecurity, and information governance experience to the practice. He possesses significant experience providing counsel to multinational and Fortune 500 companies across various industry sectors in building, deploying, and managing data and information privacy, governance, and eDiscovery programs in high-stakes, data-intensive litigation. At Mullen Coughlin, David will leverage his substantive and strategic legal skills to translate legal and technical jargon into useful business intelligence needed by legal, risk management, cybersecurity, and IT teams to address myriads of data privacy and information security concerns and align technical operations with defensible litigation strategies. David is licensed to practice, and based, in Texas.

“I am thrilled to join Mullen Coughlin’s Litigation practice to help build upon the Firm’s strong eDiscovery practice. I am excited to collaborate with such a talented team and help clients navigate complex discovery challenges with efficiency and innovation,” said David.

Prior to joining Mullen Coughlin, David was a partner in the AI Governance practice of a global accounting, risk management, and consulting firm where he designed and implemented AI and information governance strategies, policies, frameworks, and trainings. He also advised clients on eDiscovery best practices as well as data privacy and security regulatory controls related to the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and industry-specific regulations. His previous roles also included spearheading consulting projects related to artificial intelligence compliance and strategy, serving as lead eDiscovery attorney for enterprise-wide litigation and government investigation matters, developing legal eDiscovery playbooks for in-house legal teams, and serving as the cross-border eDiscovery expert for in-house and outside legal teams.

“On behalf of the entire Litigation practice, we could not be more thrilled to welcome David to the Litigation team,” said Litigation Practice Group Chair Carolyn Purwin Ryan. “He is widely recognized as a leading voice in electronic discovery and artificial intelligence, and his depth of knowledge and forward-thinking approach will be an asset to the team and our clients.”

David holds a U.S. Certified Information Privacy Professional (CIPP/US) from the International Association of Privacy Professionals (IAPP) and is a Certified Electronic Records Management Practitioner bestowed by the Association for Information and Image Management (AIIM). He received his J.D. from Duke University School of Law and a B.A. in English from Davidson College.

“Litigation involving data privacy, cybersecurity, and emerging technologies continues to accelerate at an unprecedented pace,” said Managing Member Jennifer A. Coughlin. “David’s significant experience in eDiscovery, artificial intelligence, and complex litigation significantly enhances our practice and further expands our litigation team – a group that is unmatched in both size and experience in the industry.”

Mullen Coughlin’s nationwide litigation team possess deep subject-matter knowledge, industry experience, and insight in data privacy and security class action litigation. The team has successfully managed thousands of third-party litigation and regulatory investigation matters on behalf of organizations of all sizes and across all industry sectors in the United States.

At CLM’s Annual Conference 2026 on March 26 in Florida, Mullen Coughlin Partner and Co-Chair of the Litigation practice Carolyn Purwin Ryan joins the panel session “Unpacking the Cyber Litigation Boom: What Insurers and Counsel Need to Know Now” alongside cyber insurance professionals Catherine Lyle, Kirsten Mickelson, Milan Radosevic, and Bolanle Akinrimisi.

This session examines the driving forces behind the unprecedented wave of cyber litigation throughout the United States and what it means for businesses, insurers, and legal professionals. Carolyn and the rest of the panel explore today’s evolving regulatory environment, the cyber threats affecting businesses, and the need for myriad corporate cybersecurity measures. Attendees leave with an understanding on how privacy counsel and insurers can help organizations proactively mitigate cyber risks, strengthen their defenses, and navigate the complexities of cyber insurance when facing privacy-related litigation.

Learn more about the 2026 CLM Annual Conference, and register to attend, here.

In February 2026, Mullen Coughlin welcomed six (6) attorneys to the Firm joining our Incident Response (IR) and Litigation practice groups. These attorneys hail from Pennsylvania, Virginia, Illinois, Connecticut, and the United Kingdom.

Guy Bowe re-joins Mullen Coughlin as a Partner in the IR practice based in Virginia. As Breach Counsel, Guy is often called upon to provide efficient and practical Breach Counsel services and advice to his clients on the legal, financial, operational, and reputational risks faced during the incident response process. He most recently was a Senior Claims Specialist for a global cyber insurance carrier in their Cyber, Technology & Media Liability group. Guy received his J.D. from Pennsylvania State University and is licensed to practice in Virginia, the District of Columbia, Maryland, and Pennsylvania.

Brett Randles is a Senior Associate with Mullen Coughlin UK (MC UK) based in London. Brett is an experienced Breach Counsel attorney who has led and managed hundreds of data privacy and security incidents on behalf of organizations across all industry sectors and geographic locations. Specifically, Brett supports local and foreign organizations with UK/EU GDPR compliance and other cross-border data protection issues with multi-jurisdictional impacts, as well as with incidents where the Payment Card Industry Data Security Standard (PCI DSS) applies. He received his Bachelor of Laws from Stellenbosch University and is a qualified legal practitioner in South Africa.

Grace Braun-Fales based in Connecticut, Tamara Dinnall based in PA, and Mira Rhodes based in Illinois, are Associates in our Incident Response practice group. Experienced legal practitioners, they provide Breach Counsel services to organizations from all industry sectors who have experienced, or are currently experiencing, a data privacy and security incident. Grace is licensed to practice in CT and received her J.D. in Health Law from Quinnipiac University School of Law; Tamara is licensed to practice in PA and received her J.D. from Drexel University Thomas R. Kline School of Law; and Mira is licensed to practice in IL and received her J.D. from Chicago-Kent College of Law.

Logan Lessard, also based in CT, joins the Litigation practice and focuses his practice on defending organizations in privacy- and security-related single-plaintiff, class action, and B2B disputes. He brings nearly five (5) years of experience with in-depth legal research on relevant case law; technical review of insurance policies and regulations; and preparing for trial. Logan has significant cyber insurance claims experience, having joined Mullen Coghlin from an international cyber insurance carrier where he was a Cybersecurity Claims Counsel managing over 100 open cyber claims. Logan is licensed to practice in Connecticut an received his J.D. cum laude from Roger Williams University School of Law.