Two More Law Firms Hit by Data Breaches: New Breach Stats 2022
October 5, 2022

Two law firms have been hit by data breaches, this time in the United Kingdom and Portugal. That’s in addition to the three US firms that were recently breached. The details of these latest hacks are still emerging, but they give us even more information on how exactly attackers are breaching law firms, as well as the steps firms, can take to protect themselves. Here’s what we know so far
Another day, another law firm data breach
This week, two law firms have been hit with data breaches. One of the law firms, Orrick Herrington & Sutcliffe LLP in San Francisco, lost confidential files and email messages from a partner’s account to hackers. The other law firm, Alston & Bird LLP in Atlanta, had a data breach that impacted about 30 attorneys. This is the third data breach for Alston & Bird this year.
The new breach stats report from the Identity Theft Resource Center (ITRC) shows that there were a total of 985 reported breaches in 2016. That’s an increase of over 400% since 2015. These numbers are just for reported breaches though – who knows how many actual breaches there were last year? It also looks like December was another busy month with 26 reported breaches!
The statistics on data breaches
According to a recent report, two more law firms have been hit by data breaches. One of the firms hit was Anderson Kill P.C. in New York City where 90% of the firm’s files were encrypted and rendered unusably. The other firm hit was Sidley Austin LLP in Chicago where hackers gained access to the contact information of many employees and clients.
On a more positive note, there has been some progress in the fight against cybercrime. For example, Facebook recently announced that it had taken down hundreds of fake pages and accounts that originated from Iran and Russia seeking to undermine American democracy with disinformation campaigns on its social media platform.
What can you do as a blogger or freelancer?
As a blogger or freelancer, you may be interested in the latest data breaches and how to keep your information safe. We’re seeing a trend of large law firms being hacked, with two more hitting the news this week. This follows last month’s hacking of an international law firm that had 2,500 clients across the globe – including some of the largest corporations in America. With these high-
profile data breaches happening so often, it’s important to talk about what can be done and what steps are being taken to prevent future breaches.
Can customers sue over this?
It is unclear at this time if any of these breaches will result in lawsuits. However, it is clear that the number of data breaches is on the rise, and lawyers who deal with personal injury may have to start preparing themselves for a potential increase in cases. It’s important to note that just because a breach occurs doesn’t mean that customers can automatically sue a company.
The law surrounding data breach lawsuits varies from state to state and even country to country. Most states don’t require companies to notify their customers of a breach unless there is evidence that data has been accessed or misused or if the company was legally required to do so.
How will it affect the legal field?
The legal field has been shaken up this year with two more law firms hit by data breaches in the past few weeks. The most recent breach was at Sommers Schwartz, LLP, where a phishing email led to the exposure of emails and contact information of 1,500 people.
This follows on the heels of a similar incident at Brown Raysman Millstein Felder & Steiner LLP in March 2018. As more and more law firms are hit by data breaches, concerns grow about how these incidents will affect the industry.
Law firms rely on clients to practice law, so they must protect client information to maintain their reputation as trustworthy professionals.
How will it affect your business?
I’m not surprised to see this happening. I think the trend is going to continue for a little while. The two law firms were hit with data breaches in recent weeks, and now we’re getting new stats on just how much data has been stolen from companies.
It’s a scary thought that cyberattacks are one of the biggest risks facing businesses today. That said, these numbers also show that it’s not too late to take action. We can’t avoid cyberattacks altogether, but we can shore up our defenses and make sure hackers don’t get what they’re looking for – access to your information.
What would you do in this situation if it happened to you?
The first step is to contact the customer data protection officer of the company that was breached. The customer data protection officer will then take steps to help you understand the situation, mitigate any risk, and respond appropriately.
The next step is to contact law enforcement and federal authorities to notify them of the breach in compliance with state and federal laws. Lastly, you should notify your clients as soon as possible about what has happened and how it may affect them.
Keep browsing Law Scribd for more updates.