Tabush Group's Cloud & Managed IT Blog

The business of owning and running a law firm constantly evolves, but has seen vast change, particularly over the last few years.

A disaster in the IT world comes in many forms – natural disasters, ransomware, a cyber breach, and acts of terrorism, just to name a few.  These disasters disrupt normal business and can ultimately have severe and expensive consequences on a company’s reputation and bottom line.

The bad news is many companies think these disasters can never happen to them and don’t take the proper precautions; the good news is that prevention of many disasters is attainable, and planning ensures that when there is a disaster, your company is prepared to get back to business as usual.

Small businesses, especially law and accounting firms that deal with sensitive data and financial transactions need to be concerned about cybersecurity. Cyber attacks are becoming more sophisticated and more rampant every day. Luckily, there are some very important – and often inexpensive – things every organization can do to protect themselves.

There is an increase in the frequency and efficacy of data breaches that can bring a firm’s operations to a standstill. Data breaches are often the result of vulnerable hardware and software where security measures may be weak or out of date, presenting an opportunity to hackers and ransomware. Far too often, businesses do not realize they are victims of breaches for days or even weeks, and by then, there is often nothing that can be done to repair the damage.

We recently sent a message to our clients warning them of an increase in phishing activity. We find it to be so rampant that we wanted to make this information available to the public as well.  For help with your business IT and security contact Tabush Group.

Over the past few weeks, we noticed an uptick in ‘phishing’ emails, which appear to be from Microsoft Office 365 or other popular cloud service providers, trying to get recipients to provide their log in credentials or other sensitive information. While we employ many layers of defense from top vendors for email filtering and content security for our clients, the bad guys are hard at work trying to beat the security systems; and sometimes, these things get through.

We want to provide you scenarios that you and your colleagues should be mindful of. Always be suspicious of anything that appears out of the ordinary, including:

“There are only two types of companies: Those that have been hacked and those that will be hacked.”  --Robert Mueller, former Director of the FBI

If cyber breaches are an inevitable cost of doing business, how a company responds to a breach is of extreme importance. It has recently been revealed that 57 million Uber users and drivers had personal information exposed in late 2016 and that the hackers were paid $100,000 to keep it quiet.  If all stories are true, the biggest issue with the Uber breach may not be the breach itself, but the lack of engagement, management, and delivery of the response. 

Equifax, one of the 3 largest credit agencies in the U.S., last week revealed a security breach which compromised over 140 million individuals’ personal information. While this is not the largest security breach ever in the US, because of the data that was taken, it has the potential to be the most severe, evidenced by the resignation of the company's CEO and the "retiring" of both their CIO and CSO (chief security officer).

Last Friday morning 7am Eastern Time, news started breaking of the internet being down on the east coast of the US. People were having issues accessing multiple websites including Netflix, Amazon, and Twitter during a period of two hours. Later that day, a second shorter outage occurred. 

Did you know that October is National Cyber Security Awareness Month?

It's a great annual reminder for you to take a look at what you and your company are doing to protect your business and systems from potential cyber attacks that could cripple your operations and cost you thousands of dollars in lost revenue.