Verified profile

Mark L. Krotoski

Litigation Partner at Pillsbury Winthrop Shaw Pittman LLP

Mark L. Krotoski's profile photo
LocationSilicon Valley & Washington DCDistrict of Columbia, United States
Current roleLitigation Partner, Leader of Cyber Disputes and Cartel Enforcement TeamsPillsbury Winthrop Shaw Pittman LLP · since Dec 2023
Government service27yrsU.S. Department of Justice (DOJ) · U.S. Attorney’s Office · California Attorney General's Office · U.S. District Court

About

Mark Krotoski is an accomplished litigator, former DOJ leader and federal prosecutor who assists clients in their highest stakes issues, as well as managing crises, with a focus on antitrust and cartels, cybersecurity and cybercrime, and economic espionage. He leads the Cyber Disputes team and Cartel Enforcement team, drawing on his DOJ leadership and private sector experience. 

Mark is a highly skilled litigator with nearly 20 years of DOJ experience, including leadership positions in three DOJ offices. His practice involves a diverse range of areas, with a strong focus on cybersecurity, antitrust matters, trade secrets, criminal and civil litigation, government investigations and white collar cases. With a proven track record, Mark has successfully navigated complex legal terrain, earning a reputation for managing high-stakes cases and providing strategic counsel. His wealth of knowledge and proficiency in the field allow him to consistently deliver exceptional results for his clients.

Mark has significant experience helping clients manage crises, including ransomware attacks and other cyber incidents, economic espionage and trade secret misappropriation, and responding to antitrust investigations, including navigating dawn raids. Leveraging his experience as a former federal prosecutor, Mark provides clients with practical advice to handle difficult issues as well as their collateral effects. 

Prior to joining private practice, Mark most recently served as the Assistant Chief of the National Criminal Enforcement Section in the DOJ’s Antitrust Division, where he supervised international criminal antitrust matters and prosecuted cartel cases. For more than nine years, Mark served as co-head of the privacy and cybersecurity practice of another international law firm.

He served as the national coordinator for the Computer Hacking and Intellectual Property (CHIP) Program in the Computer Crime and Intellectual Property Section of the DOJ’s Criminal Division and as a federal prosecutor in Silicon Valley in the Northern District of California as a cybercrime prosecutor. As national coordinator, he oversaw approximately 250 federal prosecutors specially trained to prosecute cybercrime and intellectual property enforcement cases. He successfully prosecuted and investigated virtually every type of computer intrusion, cybercrime and criminal intellectual property violation.

He also served as the chief and deputy chief of the Criminal Division of the Northern District of California U.S. Attorney’s Office. As chief and deputy chief, he supervised cases involving white collar crime, securities fraud, computer intrusion, intellectual property, economic espionage, organized crime and antiterrorism. As a Special Assistant Attorney General in California, Mark was counsel of record on 10 amicus briefs filed in the U.S. Supreme Court on criminal justice matters.

Mark is a prolific writer and speaker on criminal antitrust enforcement, cybersecurity, cybercrime and trade secret issues, as well on government investigations, white collar issues and the use of electronic evidence in investigations and at trial. 

Mark remains active in pro bono matters. His pro bono cases include representing a global humanitarian organization cooperating in a federal bribery investigation, which resulted in the conviction of an external consultant; non-profit organizations suffering cyberattacks and providing guidance on complying with regulatory obligations and remediation measures; and an investigation regarding the embezzlement of funds from a non-profit school organization, resulting in a civil court judgment; among other pro bono matters.

Roles

Dec 2023–Present
Current role

Litigation Partner, Leader of Cyber Disputes and Cartel Enforcement Teams

Pillsbury Winthrop Shaw Pittman LLP

Palo Alto, California

CybersecurityGovernmentAntitrustCybersecurity Analyst

Mark Krotoski leads the Cyber Disputes team and Cartel Enforcement team, drawing on his DOJ leadership and private sector experience. 

Oct 2014–Nov 2023
Former role

Litigation Partner, Co-Head of the Privacy and Cybersecurity Practice, Antitrust Practice Group

Morgan, Lewis & Bockius LLP

San Francisco, California

AttorneyPrivacyCivil LitigationCybersecurityLegalAntitrust
May 2011–Oct 2014
Former role

Assistant Chief

U.S. Department of Justice (DOJ), National Criminal Enforcement Section, Antitrust Division

(appointed)District of Columbia

AttorneyDigital Forensics Federal GovernmentAntitrustCriminal Investigation
  • Supervised international criminal antitrust cartel cases, provided guidance on cases going to trial, and counseled on electronic evidence and forensic issues

  • Led trial teams in successfully prosecuting and investigating significant international antitrust and obstruction of justice cases involving corporations and executives

Sep 2007–May 2011
Former role

National Computer Hacking and Intellectual Property (CHIP) Program Coordinator, Senior Counsel

U.S. Department of Justice (DOJ), Computer Crime and Intellectual Property Section, Criminal Division

(appointed)

CybersecurityGovernmentLegalCybercrimeIntellectual Property

Oversaw the CHIP Program which involves approximately 250 federal prosecutors specially trained to prosecute cybercrime and intellectual property enforcement cases and to provide advice on the collection of digital evidence.

Sep 2005–Aug 2007
Former role

Criminal Division Chief, Deputy Chief, Assistant U.S. Attorney

U.S. Department of Justice (DOJ), Computer Crime and Intellectual Property Section, Criminal Division

(appointed)California Northern District

Security and Law EnforcementWhite Collar CrimeAppellate LitigationIntellectual Property Criminal Investigation

Supervised and managed cases in nine sections: White Collar, Securities Fraud, Computer Hacking and Intellectual Property, Strike Force, Organized Crime Drug Enforcement Task Force, Appellate, Major Crimes, Anti-Terrorism, and Asset Forfeiture.

Dec 2003–Aug 2007
Former role

Assistant U.S. Attorney, Computer Hacking and Intellectual Property (CHIP) Prosecutor

U.S. Attorney’s Office, Criminal Division

(appointed)California Northern District

AttorneyDigital Forensics CybersecurityLegal

Prosecuted computer intrusions, theft of trade secrets, economic espionage, criminal copyright and trademark violations, computer fraud, click-fraud, and other Internet-based crimes.

Feb 1995–Nov 2003
Former role

Assistant U.S. Attorney, CHIP Prosecutor

U.S. Attorney’s Office, Criminal Division

(appointed)California Eastern District

Federal GovernmentGovernmentIntellectual Property Criminal Investigation

Prosecuted computer intrusion, intellectual property, complex financial crimes, fraud schemes, money laundering, government corruption, and obstruction of justice offenses.

Feb 1991–Dec 1994
Former role

Special Assistant Attorney General

California Attorney General's Office

(appointed)California

AttorneyLegalCriminal Investigation
  • One of four Special Assistant Attorney Generals reporting to the California Attorney General

  • Counsel of record on ten amicus briefs filed in the U.S. Supreme Court on criminal justice issues

Sep 1989–Jan 1991
Former role

Law Clerk

U.S. District Court

(appointed)California Northern District

Law ClerkResearchLegal Assistant

Served as judicial law clerk to the Honorable Chief Judge William A. Ingram, researching and drafting opinions, orders, and bench memoranda.

Apr 1987–Aug 1989
Former role

Law Clerk

Court of Appeals for the Ninth Circuit

(appointed)

Law ClerkResearch

Served as judicial law clerk to the Honorable Judge Procter R. Hug, Jr, researching and drafting opinions, orders, and bench memoranda.

Representative matters

Experience

February 2026

In representing an international retail company, led the forensic investigation concerning a cyberattack involving the acquisition of millions of customer records in all U.S. jurisdictions and more than 100 countries, provided guidance on legal obligations and coordinated with law enforcement, resulting in the identification and conviction of the perpetrator outside the United States. In an active “no-poach” investigation by the Antitrust Division, coordinated an internal company investigation and response resulting in the closing of the investigation with no charges or enforcement action. Represents clients on cyberattacks and violations of the Computer Fraud and Abuse Act including data breach class action cases.

Criminal Antitrust Cases and Investigations

February 2026

Represented international technology company during Antitrust Division investigation involving alleged exclusionary conduct during standards setting process in creating a new Wi-Fi connectivity standard resulting in closed investigation. Represented senior vice president of a leading global materials company during Antitrust Division cartel investigation which ultimately was closed. Represent companies in the Antitrust Division Leniency Program and in navigating the leniency process. Represent companies and executives involving “no poach” and wage-fixing allegations and investigations. Assist international and domestic companies in establishing effective compliance programs, including under new Antitrust Division Compliance Guidelines. Assist international and domestic companies in Dawn Raids Training to be prepared in the event of legal process issued during a new investigation. Lead counsel in the conviction of an executive involved in colluding on bids and pricing strategies for automotive instrument panel clusters supplied to a major automobile manufacturer. Lead counsel in the conviction of a former executive and company director who obstructed an investigation into automotive parts. Lead counsel for the retrial of a former airline executive accused of manipulating fuel surcharge rates on air cargo shipments from Miami to South America, resulting in a plea conviction five days before the trial. Supervised investigations related to price fixing, bid rigging and market allocation among global corporations operating in the automotive parts and air cargo sectors.

Cyber and Data Security, Unauthorized Access, Computer Intrusions, Cybercrime

February 2026

Represented financial services company before the Securities and Exchange Commission Cybersecurity Unit and Department of Justice involving a sophisticated hacker who executed unauthorized trades, resulting in no enforcement action. Represented non-profit in civil action against firm and former employer involving copyright infringement and violations of the Computer Fraud and Abuse Act, resulting in a settlement before trial. Represented general counsel of international company during investigation of data breach by the Department of Justice and Securities and Exchange Commission. In the Yahoo data breach involving “at least 500 million” stolen user accounts, represented the manager of incident response during all phases of the investigation by the Department of Justice, Securities and Exchange Commission and Special Committee. Represented numerous companies in responding to ransomware and other cyberattacks, including through all phases involving the internal forensic investigation under attorney client privilege, review of data to determine notification requirements, notifications to federal and state regulators, responding to federal and state regulatory investigations, and follow-on litigation. Led investigation of international company targeted in a cyberattack and trade secret destruction and referred the case for criminal prosecution, resulting in the conviction of a former employee. Represented companies in complying with standards under the New York Department of Financial Services Cybersecurity Regulation. Represented international company during investigation under the Payment Card Industry Data Security Standard, resulting in no company fines or penalties. Represented international company concerning reported data loss issues before the California Attorney General’s Office, resulting in no enforcement action. Represented numerous international and domestic companies during investigations of cyber fraud and unauthorized wire transfers (referred to as a “business email compromise”). Represented multiple companies in cyber risk assessments during an acquisition of or merger with another company. Represented leading insurance company and led investigation involving an underwriter who disclosed personal and sensitive information to others. Represented companies in complying with standards under the New York Department of Financial Services Cybersecurity Regulation. Lead counsel in a jury trial resulting in the conviction related to the intrusion into the Yahoo account of Alaska Governor Sarah Palin and obstruction of justice. Successfully argued the appeal before the U.S. Court of Appeals for the Sixth Circuit, which upheld the convictions (United States v. Kernell, 667 F.3d 746 (6th Cir. 2012)). Lead counsel in jury trial conviction involving a computer intrusion “time bomb” that corrupted more than 50,000 company records (United States v. Shea, 493 F.3d 1110 (9th Cir. 2007)). Obtained a conviction for computer intrusion involving multiple prominent high-technology companies (United States v. Heckenkamp, 482 F.3d 1142 (9th Cir. 2007)).

Economic Espionage and Trade Secret Misappropriation

February 2026

Represent companies involving economic espionage, trade secret misappropriation and other intellectual property theft in DOJ investigations. Achieved the landmark conviction in the United States involving source code under the Arms Export Control Act and International Trafficking in Arms Regulation, as well as securing the first sentencing under the Economic Espionage Act of 1996. This case centered on foreign economic espionage, including the misappropriation of a trade secret with the intent to benefit a foreign government (under 18 U.S.C. § 1831). Co-counsel in a case that resulted in a conviction for foreign economic espionage, encompassing the misappropriation of trade secrets with the aim of benefiting foreign instrumentalities (under 18 U.S.C. § 1831). Lead counsel on the investigation and charges against a foreign national involving computer intrusions targeting NASA and a leading provider of computer network equipment, along with the theft of trade secrets, including source code. Lead counsel in the investigation and subsequent conviction of a company vice president for the theft of trade secrets from his former employer, a Fortune 15 company. Led various criminal convictions and investigations involving the misappropriation of trade secrets.

White Collar Cases and Grand Jury Investigations

February 2026

Represented an executive in an insider trading investigation by the DOJ, resulting in no charges. Represented an executive in a grand jury investigation and successfully persuaded the court that the Fifth Amendment precluded any testimony. Referred numerous cases to law enforcement, in appropriate cases, for investigation and prosecution involving cybercrime, trade secret misappropriation, fraud and other offenses. Routinely represent companies and executives in grand jury investigations.

Other Intellectual Property Enforcement Cases

February 2026

Lead counsel in an undercover investigation that resulted in the prosecution of the largest CD and DVD manufacturing piracy scheme ever pursued in the United States at the time. Secured convictions of three key manufacturers on charges including copyright infringement, trademark violations, counterfeit label production and FBI seal violations. Lead counsel supervising undercover operation targeting an Internet “warez” conspiracy involving pirated movies, games and software; coordinated approximately 40 simultaneous searches across the United States and abroad; implemented case strategies leading to 30 convictions within one year and a total of 40 convictions for various criminal copyright violations. Lead counsel on the first convictions under a newly established federal “camming” statute, addressing unauthorized recording of motion pictures in exhibition facilities, and a new statute concerning the uploading of prereleases on the internet, specifically for criminal copyright infringement by distributing copyrighted works on computer networks. Lead counsel on the first conviction in California and the second in the United States under the Digital Millennium Copyright Act (DMCA). Lead counsel on convictions for unauthorized manufacturing and distribution of satellite television access devices, along with DMCA violations, as part of a satellite piracy scheme. This included the manufacturing and distribution of software and devices utilized to illegally access satellite programming.

Recognition

Honors

California’s Top Cyber Lawyers

Daily Journal

April 2022

Twice recognized as one of California’s Top Cyber Lawyers, Daily Journal (2018, 2022).

Cyber Law (including data privacy and data protection)

The Legal 500 U.S.

June 2023

Recognized for Cyber Law (including data privacy and data protection) (2018–2020, 2022, 2023).

Antitrust: Cartel

The Legal 500 U.S.

April 2023

Recognized for Antitrust: Cartel (2015, 2017–2019, 2022, 2023)

Publications & speeches

Cases of Ex-Uber Officer, SolarWinds Offer Data Security Lessons

Bloomberg Law

January 2026

wo landmark cases involving public companies and their cybersecurity executives offer some crucial lessons in corporate governance, transparency, program boundaries, and data privacy. One case was the first Securities and Exchange Commission enforcement action that charged a chief information security officer, or CISO, as well as the company and the first accounting control claim, based on cybersecurity failings. The other case, involving Uber Technologies Inc., was the first criminal prosecution and conviction of a chief security officer, or CSO, concerning information provided after a data breach. In an article published in Bloomberg Law, Pillsbury partners Mark Krotoski, Cyber Disputes Team Leader ; David Oliwenstein, Securities Enforcement Practice Leader; and Bruce Ericson, Securities Litigation Team Leader, note that the lessons learned from these cases are that transparency is mandatory in disclosing data breaches, that bug bounty programs must be reviewed and audited, that disclosure decisions must be placed under legal and board oversight, and that companies must have a complete understanding of the cyberthreat landscape.

Link

How to Adjust Internal Reporting for the DOJ Antitrust Whistleblower Era

Anti-Corruption Report

January 2026

In article co-authored by Litigation partner and leader of the Cartel Enforcement Team Mark Krotoski and Antitrust & Competition attorney Vinny Sidhu explores the DOJ Antitrust Division’s new whistleblower rewards program and how it reshapes the antitrust enforcement landscape by incentivizing employees to report potential misconduct directly to the government. The authors explain how this whistleblower framework tightens the race to self-report, complicates interactions with existing leniency and whistleblower programs, and elevates the importance of fast, credible and trusted internal compliance systems. They also offer a practical framework for strengthening reporting mechanisms and making timely self-disclosure decisions to mitigate enforcement risk in this new environment.

Link

California Toughens Penalties for Cartwright Act Violations

Law360

December 2025

In an article published in Law360, Pillsbury partner Mark Krotoski and attorney Vinny Sidhu analyze California’s settlement with Packers Sanitation Services Inc. (PSSI) which resolved a lawsuit brought under California’s Unfair Competition Law and Business and Professions Code, Section 16600 challenging the company’s use of no-poach provisions in its sanitation-services contracts with California customers.

Link

How Companies Can Prep for Tightened California Data Breach Notices

Law360

November 2025

In an article co-authored by Litigation partner Mark Krotoski and senior law clerk Alexandria Marx, the authors discuss California’s new Senate Bill 446, which takes effect on January 1, 2026 and establishes strict data breach notification deadlines. The law requires businesses and government agencies to notify affected residents within 30 days of discovering a breach and submit a sample notice to the California Attorney General within 15 days if more than 500 California residents are affected. These fixed timelines replace the prior “expedient time possible” standard, with limited exceptions for law enforcement needs or to determine the scope and integrity of the breach.

Link

How Financial Companies Can Prep as NYDFS Cyber Changes Loom

Law360

October 2025

A recent article by Pillsbury partners Mark Krotoski and Brian Montgomery highlights the New York State Department of Financial Services’ (NYDFS) final phase of updated cybersecurity regulations, effective November 1, 2025. The changes require financial institutions to implement multifactor authentication (MFA) and maintain comprehensive asset inventories, reflecting a broader regulatory push for stronger data protection and access controls. The article notes that while MFA is now mandatory, limited exceptions apply for small businesses or alternative controls approved by a Chief Information Security Officer. Institutions are advised to review internal policies, assess compliance gaps, and strengthen cybersecurity practices to avoid enforcement actions and reputational risks.

Link

Cybersecurity Issues in Securities Enforcement and Litigation

Webinar

January 2026

As cyber incidents continue to draw heightened regulatory attention and give rise to complex and overlapping disputes, understanding how to manage these matters from the outset is essential.

Link

What You Need to Know About Algorithmic Pricing and Antitrust Law: Federal Enforcement, California’s New Law, and Beyond

Pillsbury — Webinar

January 2026

Join Pillsbury’s Mark Krotoski, Michael Warley and Vinny Sidhu for an insightful discussion on federal law related to algorithmic pricing, new laws in California that create offenses regulating algorithmic pricing and more.

Link

White Collar and Regulatory Developments in Northern California and Beyond

Pillsbury — Webinar

December 2025

Join White Collar Litigation partners Adam Goldberg, Mark Krotoski, Anne Voigts and Christoffer Lee for an insightful discussion on recent legal developments shaping enforcement and regulatory landscapes in Northern California and beyond.

Link