Biglaw, Technology

Global Biglaw Firm Hit By 'Aggressive' Ransomware Attack

The firm says no client data was breached.

By  
on

Given the highly sensitive data that Biglaw firms deal with on an everyday basis, cybersecurity is of the utmost importance — especially during unprecedented times like these when entire firms are doing work remotely. Unfortunately, it looks like an international law firm now finds itself in a sticky situation thanks to a widespread ransomware attack.

Please note the UPDATE below.

Sources tell us that Seyfarth — an Am Law 100 firm that took in $717,370,000 in gross revenue in 2019 — has been impacted by a malicious cybersecurity incident. We understand that no one at the firm is able to access their email accounts at this time. The firm, which offers cybersecurity, data privacy, and compliance advice to its clients, has posted a statement about the attack on its website:

On Saturday, October 10, 2020, Seyfarth was the victim of a sophisticated and aggressive malware attack that appears to be ransomware. We understand that a number of other entities were simultaneously hit with this same attack. Our monitoring systems detected the unauthorized activity, and our IT team acted quickly to prevent its spread and protect our systems. We have found no evidence that any of our client or firm data were accessed or removed. However, many of our systems were encrypted, and we have shut them down as a precautionary measure.

Our clients remain our top priority, and we will continue to do everything necessary to protect their confidential information and continue to serve them. We are coordinating with the FBI and are working around the clock to bring our systems back online as quickly and safely as possible.

While our phone system has not been affected, you can get a message to us by clicking on this Contact Form if you are having difficulty reaching us. We will also provide updates on our website and share information as it becomes available.

Biglaw firms are charged with maintaining their clients’ data in the strictest of confidence, so it’s no surprise that this statement focuses on that aspect of the breach.

From this initial information, it seems like Seyfarth is faring much better than other Biglaw firms when it comes to cybersecurity. Back in 2017, DLA Piper was “paralyzed” by a ransomware attack, and law firms continue to be vulnerable to cyber threats. As noted in a legal update written by Seyfarth partners, “Vigilance now will prevent misery in the future.” Thankfully, the firm seems to have taken its own advice.

UPDATE (10/15 4:45 p.m.): Here’s a statement from Seyfarth on the progress the firm has made after this critical cybersecurity attack:

Sponsored

After locking down our systems over the weekend, our team of experts has worked tirelessly the past few days and done everything necessary to protect our clients’ and our firm’s confidential data and prevent its destruction and removal. We still have no evidence that any client or firm data was either accessed or removed. We are now in the restoration phase and have been able to bring our email system fully back online. We will continue to work through the weekend, and, based on the progress we have made so far, we expect to have full restoration of all of our critical systems by early next week.

Staci ZaretskyStaci Zaretsky is a senior editor at Above the Law, where she’s worked since 2011. She’d love to hear from you, so please feel free to email her with any tips, questions, comments, or critiques. You can follow her on Twitter or connect with her on LinkedIn.

Sponsored

CRM Banner

Topics

, , , ,