Small to midsize law firms have been increasingly targeted for cyberattacks. Cybercriminals know that smaller companies are less likely than their larger counterparts to have sophisticated security protocols in place, and that law firm data is particularly valuable. The confidential nature of attorney-client relationships gives lawyers added motivation to pay a ransom to recover their sensitive data, which is not lost on bad actors. In fact, 24.9% of all ransomware attacks in 1Q 2021 targeted professional services firms, especially small and midsize law firms, according to Coveware.
But despite the growing risk of cyberattacks, law firms continue to make critical mistakes that leave their systems vulnerable to breaches. Below are 5 common cybersecurity mistakes law firms make.