George Chaisty is a Partner with Mullen Coughlin UK (MC UK) based in London. He focuses his practice on data privacy and security incident response, advising organizations on their legal and regulatory considerations after data privacy and security incident such as a ransomware attack, business email compromise (BECs), or other unauthorized or inadvertent network intrusion. His practice encompasses legal and regulatory implications in over 100 global jurisdictions across the United Kingdom (UK), European Union (EU), Middle East, and the U.S. He routinely interacts with cyber insurance carriers and brokers, law enforcement, and other cyber- and incident response-related partners throughout the course of an incident response investigation. He is well-versed in the UK/EU General Data Protection Regulation (GDPR), as well as other UK, EU, and global data protection and privacy laws.
George has assisted hundreds of organizations of all sizes and across all industry sectors respond to, and prepare for, data privacy and security incidents – including small UK-based family run businesses to large, publicly-listed global organizations. During these stressful and unfamiliar times, he’s known for providing straightforward, empathetic, and practical counsel – recognizing the need for a calm urgency in the first hours following a real or suspected data privacy and security incident.
Prior to joining MC UK, George was a Partner at a UK-based global law firm on their Cyber and Data Risk team. Over the course of his legal career, George completed several legal secondments at two (2) global insurance carriers, shaping his lawyering skills and providing him with invaluable claims experience used in his practice today.
George is ranked by Chambers & Partners in the UK-wide “Crisis & Risk Management” guide. He is noted for being “an absolute standout practitioner in cyber incident response” and “an excellent public speaker, knowledgeable legal expert and thought leader.”
REPRESENTATIVE MATTERS
- Led incident response efforts on behalf of a UK-based hospice in connection with a ransomware attack that rendered the hospice unable to provide palliative care resulting in urgent notification to data and industry regulators.
- Advised a commercial cargo airline on its response to a ransomware attack, rendering aircraft being grounded throughout Europe and the Middle East, resulting in international regulatory reporting obligations and contractual considerations, particularly around late cargo delivery.
- Managed ransom demand and payment negotiations, in coordination with an external vendor, on behalf of a UK-based cosmetic surgery practice in connection with the unauthorized exfiltration of a customer database from a third-party platform.
- Provided legal and regulatory advice to a global social media app in connection with the theft of user and partner data resulting in the consideration of potential regulatory notifications in over 100 jurisdictions.
- Advised several schools in the UK in connection with a ransom demand in order to prevent the publication of deep fake images of pupils, including close liaison with local and national law enforcement.
- Led incident response efforts on behalf of law firms, accounting firms, and other professional services firms in connection with business email compromise (BEC) incidents impacting multiple user accounts.
SPEAKING ENGAGEMENTS & PRESENTATIONS
- “Cyber Risk Awareness – Legal Profession,” Bermuda Bar Association, Virtual, February 26, 2025
- “How Digital Forensics Are Changing the Cyber Claims Landscape,” Intelligent Insurer Webinar, Virtual, May 31, 2024
- “Cyber Incident Response Landscape: Exploring the Psychological Impact of Ransomware,” Transunion’s Data, Strategies & Trust Podcast, Virtual, February 21, 2024
- “Responding to a Data Breach: Managing the Clock and Your Reputation,” Transunion’s Data, Strategies & Trust Podcast, Virtual, August 10, 2023
- “CyberWise Online Workshop,” ANTZ, Virtual, July 13, 2023
- “A Cyber Crime Conversation – What’s Happening Out There?,” Centor Insurance & Risk Management Cyber Crime Podcast, Virtual, February 9, 2023
- “Global Update on Privacy Laws, Regulatory Considerations & Oversight,” 2022 NetDiligence Cyber Risk Summit Bermuda, Hamilton, Bermuda, November 17, 2022
- “Cyber Breach: Prevention, Preparation and Mitigation,” Travelers Techsure, Virtual, November 18, 2021
AWARDS & HONORS
- “Crisis Management,” Chambers UK Crisis & Risk Management – Band 3 (2025)