Cyberattacks targeting law firms and other legal organisations have doubled since 2023, according to new findings from cybersecurity company CrowdStrike. The growing threat has raised concerns about criminals increasingly using artificial intelligence to conduct sophisticated attacks against institutions holding confidential corporate, financial and government information. Researchers warned that AI-driven tools could make cyberattacks more accessible and effective.
What Does the Latest Research Reveal?
CrowdStrike’s 2026 Legal Threat Landscape Report examined cyber threats affecting the legal sector over a one-year period ending in August 2026.
The findings showed that cybercriminals named 455 legal organisations on websites used to publish stolen information, representing a 39% increase compared with the previous year. The research highlights the increasing exposure of law firms to financially motivated criminal groups and organisations seeking sensitive intelligence.
https://the420.in/fcrf-certified-chief-ai-officer-second-cohort-november-2026/
Why Are Law Firms Being Targeted?
Law firms possess substantial volumes of confidential information, including corporate communications, merger and acquisition documents, intellectual property, government-related records and financial details.
Such information makes legal organisations attractive targets for criminals seeking financial benefits or strategic intelligence.
Several major law firms, including Quinn Emanuel, WilmerHale and Seyfarth, have experienced cybersecurity breaches in recent months. However, CrowdStrike’s findings did not identify any particular law firm, legal department or industry vendor as a victim.
How Is Artificial Intelligence Changing Cyberattacks?
CrowdStrike warned that threat actors are increasingly adopting agentic AI technology to make hacking operations more sophisticated and efficient. Adam Meyers, CrowdStrike’s senior vice president for counter adversary operations, said the growing use of such technology could make cybercrime easier to conduct.
The concern is that AI-enabled capabilities may allow attackers to expand their operations while reducing the technical barriers associated with complex cyber intrusions. Researchers expect these developments to intensify cybersecurity challenges for the legal industry.
Who Is Behind the Attacks?
CrowdStrike identified both financially motivated cybercriminal groups and state-linked adversaries as major threats to legal organisations. The company assessed that China-linked groups would likely remain the most significant intelligence-gathering threat facing the sector.
Researchers also identified an entity targeting software specifically developed for legal industry operations. In that incident, attackers exploited a vulnerability in software used by law firms for timekeeping and billing.
What Methods Are Cybercriminals Using?
The findings also highlighted the continued use of social engineering to compromise legal organisations. Several major law firms targeted in recent incidents described their experiences as involving social engineering, where attackers manipulate individuals into disclosing sensitive information or providing access to protected systems.
In another incident described in the available findings, cybercriminals allegedly recruited a Russian national to enter a United States law firm while posing as an internal IT employee. These incidents demonstrate the different methods attackers are using to target legal institutions.
The420 Insight: What Does This Mean?
The findings indicate that law firms face growing cybersecurity risks because of the commercially and strategically valuable information they hold.
The increasing use of AI-enabled attacks, combined with social engineering and software vulnerabilities, presents significant challenges for legal organisations. Protecting confidential client information and strengthening internal security controls will remain important as cybercriminals develop more sophisticated methods of targeting the legal sector.
