6 Risks Affecting Cybersecurity for Law Firms

We are all "custodians of data." Law firms specifically are stewards of some of the most sensitive information stored and shared; a fact that doesn't elude nefarious cybercriminal syndicates. Below are some of the top cybersecurity risks affecting law firms:

1. Distributed Denial-of-Service  (DDoS). Deliberate attempt to disrupt the traffic of a targeted edge device, network, or service by flooding the target with a surge of Internet traffic. Executed properly, a DDoS can bring down communications and result in massive disruption.
2. Ransomware. Files/data are encrypted-locked-down, accompanied by a demand for money (generally Bitcoin) in exchange for a "key" to unlock the data. Once data is manipulated, future access remains a threat; paying the ransom is never advisable.
3. Phishing. This tool is used to open the door to data control. Nefarious code, better known as malware, is embedded in an email. It generally asks the recipient to open a file or click on a link, launching a "payload" that propagates across the connected infrastructure, rendering much of the affected systems "locked." This leads to the "criminal ask," which is money for your data.
4. Data Breaches. Rather than locking data, the criminal will extract sensitive files/information with the intent to sell on the Dark-Web and/or "sell back" to the law firm of origination. Control of data can lead to a variety of extortion tactics.
5. Website Compromise. Lawyers visit and use legitimate websites as a routine part of their investigative research. Many websites are not secure; this results in the delivery of code (Malware) nested in a user's system, often remaining dormant for months. The criminal can use the malware as a "window" to activity, ultimately scrapping data and/or locking files.
6. Environmental Cyber Threats. If law firms take little to no action in establishing best practices for data management, it makes a negligence suit more likely, in the event of a breach. Additionally, a lack of controls, policies and procedures allows disgruntled current/former staff to retaliate against the firm.

When an event, incident or breach becomes apparent, it's too late; the firm is in reactive mode, attempting to mitigate reputational harm, financial loss and widespread attention. Establishing cybersecurity compliance standards isn't just about adhering to what is "required," it is about doing what is necessary to operate in today's digital landscape.