Careers

Diversity

With 18 offices, from New York to Los Angeles and Seattle to Orlando, we live and work in communities all over the U.S., collaborating across locations, disciplines and even borders. Our experienced, highly ranked lawyers serve businesses wherever they are and wherever they want to go.

Offices

About Us

Pages

Professionals

Thought leadership: blogs, podcasts, videos, publications, events and news

Insights

Practices & Industries

Pro Bono

Am Law 100 firm with practices in Business, Digital Assets and Data Management, Intellectual Property, Labor & Employment, Litigation and Tax.

Home | BakerHostetler

James Sherer Contributes to AI Governance Resolutions in Cybersecurity Law Report Article

ADventures in Law

All Hat, No Cowboy: What’s Next for the FTC After Corpay’s Fuel Card Rodeo Gets Enjoined?

Hemp Industry Under Intensifying Legal Scrutiny

2026 Wage and Hour Nationwide Update: Key Changes That Could Affect Your Business

<p class="BHBodyText">Leveraging his prior experience as a litigator and as assistant general counsel for a leading legal support services provider, Joe helps clients identify practical, business-oriented solutions to data security incidents. Joe has handled a variety of matters involving ransomware, nation-state cyber espionage campaigns, business email compromises, payment card compromises, inadvertent disclosures and wire fraud issues for clients in the manufacturing, technology, hospitality, restaurant, retail, professional services, financial and educational sectors. As soon as clients discover a data security incident, he works with them to assess the scope, assemble the necessary internal and external response teams, implement a containment, remediation, and business continuity strategy, conduct an investigation, develop messaging, evaluate regulatory obligations and respond to consumer and regulatory inquiries in a way that is designed to preserve customer relationships and minimize regulatory and litigation risk. Joe is also the former office lead for the Digital Assets and Data Management Group in Cincinnati and Columbus.</p>

core/freeform

J.D., The Ohio State University Michael E. Moritz College of Law, 2005, 

B.S.B.A., Xavier University, 2002

<ul>
<li>Ohio Super Lawyers &#8220;Rising Star&#8221; (2009)</li>
</ul>


Cincinnati

Inside Regulators’ View of ‘Reasonable Security’ (Corporate Compliance Insights)

Joseph Bruemmer Speaks to Young Presidents Organization’s Family Office Section

Joe Bruemmer Joins Podcast to Discuss Data Security Incident Response Report

Joe Bruemmer Addresses Ransomware Attacks at Incident Response Forum Masterclass

DSIR Report Deeper Dive - 2022

2022 DSIR Report Deeper Dive: Ransomware

2022 DSIR Report Deeper Dive: Forensics

Data Counsel

DSIR Deeper Dive into the Data: Ransomware Front and Center

Joe Bruemmer Speaks to Ohio Mortgage Bankers on Cybersecurity

Forensics Deep Dive: The Importance of Proper Configuration and Monitoring

Services

Digital Assets and Data Management

Digital Risk Advisory and Cybersecurity

Industries

Hospitality

<ul>
<li>Served as lead incident response counsel for global, publicly traded manufacturing company in connection with enterprise-wide ransomware incident, guiding overall response strategy, addressing U.S. and international regulatory notification requirements and navigating customer and stakeholder inquiries.</li>
<li>Served as lead incident response counsel to prominent law firm in connection with nation-state cyber espionage incident.</li>
<li>Served as lead incident response counsel to leading semiconductor research company in connection with nation-state cyber espionage incident.</li>
<li>Represented global hospitality company in connection with cyber extortion incident, resulting in notice to numerous regulators and data subjects worldwide.</li>
<li>Represented SaaS securities trading platform utilized by major financial institutions in connection with significant ransomware incident, handling inquiries from the SEC and international financial regulators.</li>
<li>Represented SaaS fraud analytics platform in connection with ransomware incident and resulting regulatory inquiry.</li>
<li>Led response of publicly traded telecommunications company to significant ransomware incident, providing guidance on initial response, crisis communications, forensic investigation, notification analysis, auditor inquiries and regulatory response.</li>
<li>Served as lead legal counsel and breach coach for ransomware incidents involving publicly traded technology company across all phases of incident response.</li>
<li>Represented numerous other publicly traded and privately held businesses in the U.S. and abroad in responding to ransomware incidents involving enterprise-wide encryption and exfiltration of data involving data subjects in international jurisdictions.</li>
<li>Represented multibrand restaurant operator and franchisor in nationwide payment card incident. Representation required coordination of dual-track forensic and PFI investigations; advising on PCI DSS rules and state data breach notification laws; liaising with the FBI; developing a comprehensive communications strategy for customers, franchisees and employees; and resolving regulatory inquiries.</li>
<li>Represented super-regional hotel chain in managing vendor data security incident requiring nationwide notice, coordination with vendor and vendor’s PFI, and resolution of regulatory inquiries.</li>
<li>Represented multiple information technology managed service providers in ransomware incidents involving the MSPs and their clients.</li>
<li>Lead hospitality company’s response to significant ransomware incident involving corporate and property networks.</li>
</ul>


Joseph L. Bruemmer

Joseph L. Bruemmer

Experience

Recognitions and Memberships

Insights and News

Credentials

Community and Pro Bono

Areas of Focus

Industries

Services

Featured Insights