John A. Darminio

John Darminio is a member of the firm’s national Cybersecurity & Data Privacy team, focusing the bulk of his practice on data breach incident response. John provides clients across numerous industries and jurisdictions with immediate assistance and counseling in responding to, remediating, and analyzing risks associated with actual or suspected data breaches. While overseeing forensic investigations and the subsequent complex data analysis, he guides clients through notification requirements and regulatory compliance with international, federal, and state privacy laws, including, but not limited to, CCPA, CPRA, DFARS, FERPA, GDPR, GLBA, HIPAA, and HITECH. John also assists clients with preparing notification materials, incident messaging, and handling post-incident escalations, inquiries, and regulatory investigations. John and the incident response team are available to 24/7, recognizing breach incidents require a prompt response.

John also provides counsel in defense of data breach and data privacy class action lawsuits across numerous federal and state court jurisdictions, as well as complex subrogation matters stemming from data breach responses. Given his extensive experience, he is regularly asked to participate in incident response tabletop exercises and present to prospective clients, helping them understand proper pre-incident security protocols and best practice for incident response planning and preparedness given the constantly changing threat landscape.

John is a graduate of Pace University School of Law. While in law school, he served as an Articles Editor for the Pace Environmental Law Review. He received his undergraduate degree in Political Science, with a minor in Journalism, from Stony Brook University. John is a member of the New York State Bar and is admitted to practice before the United States District Court for the Southern District of New York and the Eastern District of New York.

Newsroom

News

•Election of New Partners Showcases National Footprint
Firm News, 1.1.25

Publications

•Fraudulent Email and Wire Transfer Scams Targeting Law Firms and Settlement Funds
Article, 2.17.26
•Misrouted Money, Real Consequences: Who Pays for Fraudulent Wires?
Case Updates, 9.23.25
•New Jersey Sets Tough Deadline for Reporting Cyberattacks
Article, 5.15.23

In the News

•Fraudulent Email and Wire Transfer Scams Targeting Law Firms and Settlement Funds
•Misrouted Money, Real Consequences: Who Pays for Fraudulent Wires?
•Arizona Data Breach Dismissal Sets Precedent for Striking Class Allegations
•Election of New Partners Showcases National Footprint