Stephanie Cipolla is an associate in the Litigation Department and a member of the firm’s Data Strategy & Security practice.

Her practice focuses on cybersecurity and data privacy issues, including incident preparation and response. Her recent matters include assisting clients in the finance, tech, and critical infrastructure sectors in responding to data security incidents including nation-state attacks, insider threats, email compromises, and ransomware attacks.

Ms. Cipolla also assists clients in developing tailored incident response plans, testing their plans through customized simulated breach drills, and advising on regulatory issues including compliance with the NYS Department of Financial Services cybersecurity regulation.

Ms. Cipolla joined Debevoise in 2016. Ms. Cipolla received her J.D. cum laude from St. John’s University School of Law in 2016, where she was an editor of the St. John’s Law Review. She received a B.A. cum laude from The University of Pennsylvania in 2012.

She is currently on secondment with a Firm client.


  • St. John's University School of Law, 2016, J.D.
  • University of Pennsylvania, 2012, B.A.

Bar Admissions

  • New York