Carolyn Purwin Ryan

426 W. Lancaster Avenue, Suite 200
Devon, PA 19333

Office: (267) 930-6836


Villanova University School of Law
Masters of Law, Taxation, 2009

Villanova University School of Law
Juris Doctor, 2007

Georgetown University
Bachelor of Science, Health Studies, 2002


  • Pennsylvania
  • U.S. District Court for the Eastern District of Pennsylvania
  • U.S. District Court for the Middle District of Pennsylvania
  • U.S. District Court for the Western District of Pennsylvania
  • New Jersey
  • U.S. District Court for the District of New Jersey
  • U.S. Tax Court

Practice Areas

Professional Memberships

  • American Bar Association (ABA) – Vice-Chair, Tort Trial & Insurance Practice Section’s (TIPS) Cybersecurity and Data Privacy General Committee
  • Pennsylvania Bar Association (PBA)
  • Defense Research Institute (DRI)
  • American Health Lawyers Association (AHLA)

Carolyn Purwin Ryan is a partner at Mullen Coughlin. She serves as breach counsel and provides third-party privacy defense legal services. She also aids clients in incident response planning, including tabletop exercises, assessment of regulatory compliance requirements and inquiries from regulators on both the state and federal levels. Ms. Ryan serves as a breach counsel to companies in various areas including healthcare institutions, construction companies, managed service providers, municipalities, professional services, retail, technology and financial institutions. She leads response investigations, guidance in governmental investigations, mitigation and restoration services. Ms. Ryan counsels clients on development of risk assessment policies, vendor agreement analysis and implementation of data privacy practices.

Prior to joining Mullen Coughlin, Ms. Ryan was the co-chair of the Cybersecurity and Data Privacy department at her previous firm. She also served as national counsel for several state and federal mass tort litigations representing manufacturers and distributors of pharmaceuticals, medical publishers, morcellators and various surgical devices. She previously clerked for the Honorable Joseph Rosa in the Superior Court of New Jersey and Honorable Richard Berman in the United State Court, Southern District of New York.

Carolyn was named a Pennsylvania “Rising Star” by Super Lawyers in 2018 and 2019.


  • “How Do We Really Solve Ransomware,” 2021 Advisen Cyber Risk Insights Conference, Virtual, October 20, 2021
  • State of the Cyber Market,” The Graham Company, Virtual, September 15, 2021
  • “Cyber Event Tabletop Exercise,” 2021 CLM Claims College, Baltimore, MD, September 10, 2021
  • “A Heavy (and Expensive) Burden: Managing Data in the Age of Data Privacy Legislation,” 2021 Annual CLM Conference, Atlanta, GA, August 12, 2021
  • “Preparation For, and Management Of, Catastrophic Cyber Events,” 9th Annual Cyber Liability Insurance ExecuSummit, Uncasville, CT, May 12, 2021
  • “Cyber Law Update 2021,” Pennsylvania Bar Institute, Virtual, April 29, 2021
  • “Ransomware,” Olympia Insurance Spring Risk Conference, March 25, 2021
  • “Living Unapologetically,” WINCiyght, March 9, 2021
  • “Building Cyber Confidence,” S-RM, Virtual, February 18, 2021
  • “Ransomware: Where Do We Go From Here,” American Bar Association, February 12, 2021
  • “Cyber Insurance and the Legal Aspects Related to a Breach,” Miami Finance Forum CISO Roundtable, Virtual, February 11, 2021
  • “International Claims Management,” NetDiligence Conference, November 2020
  • “Ryuk, Maze, Sodinokibi, Conti…OH MY!,” Advisen, October 21, 2020
  • “Cybersecurity Tabletop,” Crittenden Medical Conference, October 2020
  • “Recent Cyber Updates,” Chubb Claims Review, June 2020
  • “Preparing, Responding and Recovering from a Cyber Incident,” The Knowledge Group, March 2020
  • “Understanding Cyber Risks and Ransomware,” Construction Financial Management Association, November 2019
  • “Anti-Hacking and Privacy Laws for Businesses: Rights and Remedies,” Knowledge Group, June 2019
  • “Electronic Discovery and Data Breaches,” NetDiligence, Junto News, August 27, 2019
  • “Cybersecurity Tabletop Exercise,” AICC Box Summit, August 2019
  • “Law Firms: Are They the Next Industry to Become a Cyber Breach Target?,” USI Affinity, 2018
  • “Cybersecurity Best Practices,” Dispute Resolution Institute, 2018
  • “Fighting the Cyber War: How to Protect Yourself and the Companies you Represent,” PA I Day, August 2018
  • “Cybersecurity: To Cloud or Not to Cloud,” USI Affinity, August 2018
  • “Claims: Cyber Intruders Target Insurance Legal Community,” AM Best, August 2018
  • “Cost of a Data Breach,” NetDiligence Conference, 2018
  • “Top Ten Practice Pointers for Dealing with Electronic Discovery,” HB Litigation, 2017