Law.com Subscribers SAVE 30%
Call 855-808-4530 or email [email protected] to receive your discount on a new subscription.
6 Risks Affecting Cybersecurity for Law Firms
Cybercriminals are increasingly targeting law firms; extortion is quickly realized, given the nature of highly confidential client data. The digital footprint of law firms is constantly expanding, leading to more entrances to a firm's network infrastructure, which is a direct gateway to data. This expansion, combined with insider risks (a firm's own staff), makes having risk-control protocols of paramount importance.
We are all "custodians of data." Law firms specifically are stewards of some of the most sensitive information stored and shared; a fact that doesn't elude nefarious cybercriminal syndicates. Below are some of the top cybersecurity risks affecting law firms:
- Distributed Denial-of-Service (DDoS). Deliberate attempt to disrupt the traffic of a targeted edge device, network, or service by flooding the target with a surge of Internet traffic. Executed properly, a DDoS can bring down communications and result in massive disruption.
- Ransomware. Files/data are encrypted-locked-down, accompanied by a demand for money (generally Bitcoin) in exchange for a "key" to unlock the data. Once data is manipulated, future access remains a threat; paying the ransom is never advisable.
- Phishing. This tool is used to open the door to data control. Nefarious code, better known as malware, is embedded in an email. It generally asks the recipient to open a file or click on a link, launching a "payload" that propagates across the connected infrastructure, rendering much of the affected systems "locked." This leads to the "criminal ask," which is money for your data.
- Data Breaches. Rather than locking data, the criminal will extract sensitive files/information with the intent to sell on the Dark-Web and/or "sell back" to the law firm of origination. Control of data can lead to a variety of extortion tactics.
- Website Compromise. Lawyers visit and use legitimate websites as a routine part of their investigative research. Many websites are not secure; this results in the delivery of code (Malware) nested in a user's system, often remaining dormant for months. The criminal can use the malware as a "window" to activity, ultimately scrapping data and/or locking files.
- Environmental Cyber Threats. If law firms take little to no action in establishing best practices for data management, it makes a negligence suit more likely, in the event of a breach. Additionally, a lack of controls, policies and procedures allows disgruntled current/former staff to retaliate against the firm.
When an event, incident or breach becomes apparent, it's too late; the firm is in reactive mode, attempting to mitigate reputational harm, financial loss and widespread attention. Establishing cybersecurity compliance standards isn't just about adhering to what is "required," it is about doing what is necessary to operate in today's digital landscape.
This premium content is locked for Entertainment Law & Finance subscribers only
ENJOY UNLIMITED ACCESS TO THE SINGLE SOURCE OF OBJECTIVE LEGAL ANALYSIS, PRACTICAL INSIGHTS, AND NEWS IN ENTERTAINMENT LAW.
- Stay current on the latest information, rulings, regulations, and trends
- Includes practical, must-have information on copyrights, royalties, AI, and more
- Tap into expert guidance from top entertainment lawyers and experts
Already a have an account? Sign In Now Log In Now
For enterprise-wide or corporate acess, please contact Customer Service at [email protected] or 877-256-2473
The Article 8 Opt In
The Article 8 opt-in election adds an additional layer of complexity to the already labyrinthine rules governing perfection of security interests under the UCC. A lender that is unaware of the nuances created by the opt in (may find its security interest vulnerable to being primed by another party that has taken steps to perfect in a superior manner under the circumstances.
Major Differences In UK, U.S. Copyright Laws
This article highlights how copyright law in the United Kingdom differs from U.S. copyright law, and points out differences that may be crucial to entertainment and media businesses familiar with U.S law that are interested in operating in the United Kingdom or under UK law. The article also briefly addresses contrasts in UK and U.S. trademark law.
Legal Possession: What Does It Mean?
Possession of real property is a matter of physical fact. Having the right or legal entitlement to possession is not "possession," possession is "the fact of having or holding property in one's power." That power means having physical dominion and control over the property.
Warehouse Liability: Know Before You Stow!
As consumers continue to shift purchasing and consumption habits in the aftermath of the pandemic, manufacturers are increasingly reliant on third-party logistics and warehousing to ensure their products timely reach the market.
Strategy vs. Tactics: Two Sides of a Difficult Coin
With each successive large-scale cyber attack, it is slowly becoming clear that ransomware attacks are targeting the critical infrastructure of the most powerful country on the planet. Understanding the strategy, and tactics of our opponents, as well as the strategy and the tactics we implement as a response are vital to victory.