Security researchers discover a data breach involving 193 law firms

Security researchers TurgenSec have discovered a data breach at a legal software provider which has affected over 190 law firms, including some magic circle firms.

A database was discovered online which, according to TurgenSec, appears to relate to staff of the law firms in question and, in some case, potentially sensitive data relating to clients including extensive details of transaction, payment terms and client agreements.

It is believed the database had been available online for some time. Green CDL has not seen the database but has seen a list of the law firms involved and a list of the fields of data involved. There are some 87 fields involved, including passwords.

If what TurgenSec is saying is correct this represent a serious cyber security breach. 

The matter has been reported to the National Cyber Security Centre.

About the Author

John Green, in house solicitor Green CDL Ltd a company providing cyber security and data protection training, eLearning, advice and Cyber Essentials certification.