Breaking Legal News & Current Law Headlines | Daily Legal Briefing
  • Home
  • Hot Topics
  • Breaking
  • Business
  • Big Law
  • Small Law
  • Law School
  • Legal Tech
No Result
View All Result
No Result
View All Result
Breaking Legal News & Current Law Headlines | Daily Legal Briefing
No Result
View All Result
Home Legal Tech

There Are Only Law Firms That Have Been Hacked And Those That Will Be

Daily Legal Briefing by Daily Legal Briefing
August 22, 2022
in Legal Tech
0
There Are Only Law Firms That Have Been Hacked And Those That Will Be
4
SHARES
32
VIEWS
Share on FacebookShare on Twitter


hacker-1944688_1280What do the legal departments of Volkswagen, Ikea, Jones Lang LaSalle, Citibank, and Caterpillar all have in common? Some amount of their legal work in Russia may have been made public this summer by hactivist group Anonymous’ action against Russian law firm Rustam Kurmaev and Partners, also known as RKP Law.

(Screenshot by author of RKPLaw hack announcement on Twitter by @DepaixPorteur)

I had written in Harvard Business Review about the potential for Wikileaks and related groups to “expose your corporate brain” back in 2010 before the groups had ever done so to private companies. Not long after, the director of the FBI put forward the oft-cited point of view that “there are only two types of companies: those that have been hacked and those that will be. And even they are converging into one category: companies that have been hacked and will be hacked again.” From where we sit today, this is categorically true.

Law firms are finding themselves as unique nodes under attack in a geopolitical environment with cross-cutting adversarial intentions. In the risk world, we typically think about threat as a function of intent and capability. Without a doubt, the capability of groups to breach law firm IT defenses is very real. For instance, the hackers that took down RKP law told the International Business Times that they spent a month getting into the systems, sending RKP’s IT team emails from their bosses’ accounts to taunt them every time they were kicked out.

What’s really shifting is intent. In this case, the corporations outlined at the top fall victim to the fact that Anonymous set its sights on taking down major Russian entities in the wake of Russia’s invasion of Ukraine. One of those entities happened to be a law firm foreign companies turned to for litigation and anti-corruption work — none of which they would want to see in the public sphere.

Of course this cuts the other political way too — I wrote recently about Russia sanctioning an unprecedented number of U.S. lawyers, whose law firms are all likely in the Kremlin’s focus as well as that of its hackers. And, of course, firms can become collateral damage without necessarily being the target as well. It’s worth recalling the 2017 Ransomware hit on DLA Piper that locked up the firm’s systems — and which was alleged to have been traced back to a Ukrainian payroll supplier hit by fast-spreading Russian malware.

In the past few days, we’ve seen China’s strong-handed response to a visit from U.S. Speaker of the House Nancy Pelosi’s visit to Taiwan — everything from missile launches around Taiwan to cutting off collaboration on climate change. Just this week, the U.S. and Taiwan announced they are progressing on a mutual trade deal, which will no doubt provide the opportunity for huge amounts of legal work and lobbying by private companies that want to influence and prepare for such a deal. It is not hard to imagine those law firms assist them, in the process becoming increasingly attractive targets for Chinese hackers.

The good news is that many law firms understand the risk environment they face and have put in place policies to do their best to increase the time and effort it would take hackers to breach their systems. The American Bar Association’s (ABA) “2021 Legal Technology Survey Report” noted that roughly half the law firms surveyed have policies in place around data retention, email use, internet use, remote access, and social media, with higher scores as firm size increases. Of course, this sits next to their statistic that 35% of law firms with over 100 attorneys have experienced a data breach at some point.

The question I’m most interested in, however, is whether corporate customers are able to adequately assess the risk they face in engaging with particular law firms. Traditional cyber assessments are not good enough in a world where we live in the digital equivalent of the assumption that a burglar can break into any house if they want to badly enough. What’s really needed is to actually understand the DNA of the law firms you are working with and figure out if they are also likely to be a target.

Without that type of analysis it is particularly difficult to have confidence in any threat or risk assessment. This is like assuming the risk of terrorism on a plane flight is equivalent across different flag carriers just because they all follow the same security protocols. Actually, it makes a pretty big difference whether adversaries want to cause damage or not, which of course is a function of many factors like country of origin in the case of a plane flight. Or the nature of a law firm’s work in that case.

So, as in-house counsel, did you know that over a third of your larger law firms have experienced a breach? Do you have a way to differentiate those law firms you work with that are most likely to be targeted from those that aren’t? Are you confident that the higher-risk partners are handling your data in a way that, in the event of an exploit, you could mitigate the damage?

Technology solutions like Hence can be helpful in learning everything possible about your law firms, but of course traditional approaches like media monitoring about the work your external law firms are doing and forcefully raising concerns can go a long way too.


Sean West HeadshotSean West is Co-Founder of Hence Technologies, a software company that transforms how enterprises work with external counsel. He was previously Global Deputy CEO of Eurasia Group, the geopolitical advisory firm. He writes a biweekly column in Above the Law on geopolitics and the practice of law. Special thanks to Jacob Schapero for his contributions to this article.





Click to Read Original Article

Previous Post

Jonathan Turley Very Upset That Merrick Garland Isn’t Cartoonishly Bad At His Job

Next Post

Why It’s Necessary to File an Employment Discrimination Complaint with the DFEH

Daily Legal Briefing

Daily Legal Briefing

The latest breaking legal news from across World all in one place.

Related Posts

Women in Law Are Driving an Entirely New Practice Model
Legal Tech

Women in Law Are Driving an Entirely New Practice Model

by Daily Legal Briefing
March 22, 2023
DoD driving ‘dramatic’ change to ‘outpace’ foes, line up with National Cyber Strategy
Legal Tech

DoD driving ‘dramatic’ change to ‘outpace’ foes, line up with National Cyber Strategy

by Daily Legal Briefing
March 21, 2023
Nexl, A No-Data-Entry CRM Platform for Law Firms, Raises $4M
Legal Tech

Nexl, A No-Data-Entry CRM Platform for Law Firms, Raises $4M

by Daily Legal Briefing
March 20, 2023
3 Lawyers Weigh In With Their Top TikTok Marketing Tips
Legal Tech

Yes, The US Government Threatening To Block TikTok Violates The 1st Amendment

by Daily Legal Briefing
March 17, 2023
Applying AI To Legal Recruiting: New Tools For Efficiently Matching Firms And Candidates
Legal Tech

Applying AI To Legal Recruiting: New Tools For Efficiently Matching Firms And Candidates

by Daily Legal Briefing
March 17, 2023
Next Post
Why It’s Necessary to File an Employment Discrimination Complaint with the DFEH

Why It’s Necessary to File an Employment Discrimination Complaint with the DFEH

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

Premium Content

What Behavior is Not Considered as Sexual Harassment in North Carolina?

What is Considered Supervisor Harassment?

July 1, 2022
6 Ways Firms Can Win With Legal Technology In An Uncertain Market

6 Ways Firms Can Win With Legal Technology In An Uncertain Market

July 22, 2022
Top Reasons for Entrepreneurs to Hire Business Lawyers for Their Startups

Top Reasons for Entrepreneurs to Hire Business Lawyers for Their Startups

August 4, 2022

Browse by Category

  • Big Law
  • Breaking
  • Business
  • Hot Topics
  • Law School
  • Legal Tech
  • Small Law

About US

Breaking Legal News & Current Law Headlines | Daily Legal Briefing.
Online coverage of breaking legal news and current law headlines from around the US. Top stories, videos, insight, and in-depth analysis.

Categories

  • Big Law
  • Breaking
  • Business
  • Hot Topics
  • Law School
  • Legal Tech
  • Small Law

Recent Updates

  • Former Biglaw Attorney Suspended From Practice For Insider Trading
  • This Biglaw Firm Is Expanding By Hiring A Boatload Of Lateral Partners
  • Lawyers Should Nurture Smaller Clients

© 2021 Daily Legal Briefing | Breaking Legal News & Current Law Headlines

No Result
View All Result
  • Contact Us
  • Home

© 2021 Daily Legal Briefing | Breaking Legal News & Current Law Headlines

Are you sure want to unlock this post?
Unlock left : 0
Are you sure want to cancel subscription?