Phishing Emerges as Top Threat in Legal Industry, Highlighting Cybersecurity Gaps
A joint report by Fenix24 and ILTA reveals phishing as the leading cybersecurity threat in the legal sector, with only half of law firms having immutable backups, underscoring the urgent need for enhanced security measures.
The legal industry is facing a significant shift in cybersecurity threats, with phishing now ranking as the top concern, according to a recent report by Fenix24 and the International Legal Technology Association (ILTA). The 'Security at Issue: 2025 State of Cybersecurity in Law Firms' report highlights a move towards more sophisticated, human-operated attacks, leaving many firms unprepared for the recovery phase after a breach.
John Anthony Smith, Founder & Chief Security Officer of Fenix24, noted the industry's lag in adapting to these evolving threats. The report's findings, based on 2024 survey results, reveal that only 50% of law firms have immutable backups, a critical component for data recovery post-attack. Furthermore, the application of Multi-Factor Authentication (MFA) across high-value systems remains inconsistent, with just 18% of firms applying it to production storage.
Confidence in security measures among law firms has declined, with only 38% considering themselves 'very secure,' down from 50% in 2023. This drop coincides with an increase in firms acknowledging known security gaps, from 14% to 23%. The report also identifies external assessments and tabletop exercises as key drivers of security investment, reflecting a growing recognition of the need for proactive vulnerability management.
Corey Simpson, Chief Operating Officer at ILTA, emphasized the importance of recovery readiness in maintaining client trust and operational continuity. The report underscores the necessity for law firms to invest in robust cybersecurity frameworks capable of withstanding targeted attacks. For more details, the full report is available at https://fenix24.com/iltareport2025/.