header-logo header-logo

NLJ this week: Cyberattacks—why law firms must prepare for the worst

225398
Law firms and chambers are prime targets for increasingly sophisticated cyberattacks. With sensitive data, time-critical work, and client funds at stake, the consequences of a breach can be catastrophic. Writing in NLJ this week, Tom Pelham and Sam Lunn of Kennedys stress the importance of cyber insurance and having a robust incident response plan in place

Threat actors now favour social engineering and supply chain attacks, exploiting human error and vendor vulnerabilities. The legal sector must think beyond IT fixes and prepare for regulatory, reputational and operational fallout. A coordinated response—led by forensic experts, breach lawyers and crisis communicators—is essential. Firms should also scrutinise their vendors, back-up systems and data minimisation practices.

The message is clear: no firm is immune, but early planning and expert support can mitigate the damage when—not if—a cyber incident strikes.

MOVERS & SHAKERS

Thomson Hayton Winkley—Jordan Wallace

Thomson Hayton Winkley—Jordan Wallace

Thomson Hayton Winkley strengthens family law team

Ward Hadaway—Barnaby Rosenthall

Ward Hadaway—Barnaby Rosenthall

Construction lawyer returns to Ward Hadaway in Teesside role

Bird & Bird—Shahin Baghaei

Bird & Bird—Shahin Baghaei

Bird Bird hires leading legal transformation expert

NEWS
Legal aid deserts leave almost one in four without adequate access to justice
The Solicitors Regulation Authority (SRA) has warned solicitors and law firms that using artificial intelligence does not alter their professional obligations, amid concerns over inaccurate legal material and client confidentiality
From forgotten interest claims to case-management appeals, a string of procedural developments offers useful—and occasionally cautionary—lessons for practitioners

Jonathan Fisher KC highlights that it now accounts for around 40% of criminal offences, with roughly 70% involving technology, and argues that the UK cannot simply prosecute its way out of the problem. Detection, investigation and prosecution all require improvement, while different fraud types demand tailored responses.

How forcefully can a litigant criticise a public authority before robust advocacy crosses the line into unreasonable conduct? 
back-to-top-scroll