The "Dark Overlord" Strikes The Practice Of Law: What Law Firms Can Do To Protect Themselves
April 17, 2019 —
Ivo G. Danielle – Newmeyer & DillionCybersecurity breaches involving law firms are on the rise with each passing year. Law firms are prime targets for cyber criminals seeking confidential and sensitive information because of the various types of legal work that law firms normally handle for their clients. Whether it be mergers and acquisitions, the use of intellectual property, purchase agreements, bankruptcy or even litigation involving divorce, law firms are a rich depository for highly confidential and sensitive information. As a result, law firms must employ comprehensive security measures to protect themselves from security breaches or risk being on the losing end of a costly malpractice claim, and suffer severe reputational harm.
Law Firms Continue To Be Targeted By Cybercriminals
According to the American Bar Association ("ABA") 2018 Legal Technology Survey Report, 23% of the law firms who participated in the survey reported that their law firm experienced a data breach. Although this may be just a 1% increase from the 22% who reported a breach in 2017, it is important to understand that this is an increase of 8% from the stable percentages reported from 2013 through 2016.1 The 2018 survey report also revealed that security breaches fluctuated with firm size – 14% for solo law firms, 24% for firms employing 2-9 attorneys, approximately 24% for firms with 10-49 attorneys, 42% for firms with 50-99 attorneys, and approximately 31% for those firms employing 100 or more attorneys.
Latest Law Firm Security Breaches
The notorious criminal group called "The Dark Overlord" has a history of committing data breaches of high profile companies such as Gorilla Glue, Netflix, Larson Studios, multiple healthcare companies, and Little Red Door Cancer Agency. Their goal is simple – steal sensitive information and then extort payment from the victims by threatening to release the sensitive information to the public.
On December 31, 2018, this cybercriminal group announced to the world that they had acquired 18,000 documents containing highly sensitive legal information related to insurance based litigation connected to the 9/11 tragedy. The stolen information was the attorney/client property of Lloyd's of London, Silverstein Properties, and Hiscox Syndicates, Ltd. In its announcement, The Dark Overlord boasted that they were in possession of client sensitive information, such as: "emails; retainer agreements; non-disclosure agreements; settlements, litigation strategies; liability analysis; defense formation; collection of expert witness testimonies; communication with government officials in countries all over the world; voice mails; dealings with the FBI, USDOJ, DOD, confidential communications, and so much more."
Subsequent to the data breach, The Dark Overlord announced to the public that they designed a compensation plan that would allow for public crowd-funding for its organization to permit the public to view the stolen information in exchange for bitcoin payment. The more public funding it receives, the more stolen sensitive information will be unlocked and released to the public. It is estimated that this cybercriminal group already distributed information to the public on two separate occasions during the month of January 2019.
High profile cybersecurity breaches of law firms is nothing new – for example, the infamous Panama Papers breach, where cybercriminals leaked 11.5 million documents exposing the shadowy business of setting up offshore corporations as tax shelters for businesses, celebrities, and politicians - and the infamous Petya Malware attack which resulted in a digital lockdown of one of the world's largest law firms, DLA Piper. However, despite the infrequency of publicized cyber-attacks of law firms by the media, the FBI has recently announced that law firms should expect an increase in security attacks by cybercriminals because law firms are now viewed as "one-stop shops" for cybercriminals. Therefore, in order to combat the inevitable increase in cyber-attacks, law firms must get prepared.
How Law Firms Can Protect Themselves
All law firms will agree that the most serious consequence of a security breach for their firm would be the unauthorized access to sensitive client data. The American Bar Association's Model Rules of Professional Conduct, specifically Rules 1.1 and 1.62 and related Comments, require an attorney to take competent and reasonable measures to safeguard information relating to their clients. This duty to "safeguard' information imposes a significant challenge to firms when using technology in connection with protecting client information because most law firms are not savvy with technology and lack proper cyber security training.
In order for a law firm to protect itself from security breaches and inadvertently violate its duty of safeguarding a client's sensitive information, it is important to take the following actions:
- Start by taking an inventory and risk assessment of the firm to determine what needs to be protected – the inventory should include both technology and data;
- Develop, implement and maintain an appropriate cybersecurity program that complies with applicable ethical and legal obligations;
- Ensure the cybersecurity program addresses people, policies and procedures, and technology. The cybersecurity program must designate an individual or a group to be in charge and coordinate security;
- Develop an incident response plan scaled to the size of the firm;
- Continually train staff and attorneys to identify and understand potential cybersecurity threats;
- Consider implementing a third-party assessment of firm's cybersecurity program and policies;
- Purchase cyber liability for insurance which not only covers first party losses to law firms (like lost productivity, data restoration, and legal expenses) but also liability protection to third parties;
- Implement authentication and access controls for network, computers and mobile devices used by the firm's staff and attorneys;
- Consider the use of full-drive encryption for computers and mobile devices;
- Have staff and attorneys avoid and/or limit the use of public WiFi when working remotely; and
- Create a disaster recovery plan to backup all data in the event of a cyber-attack or natural catastrophe.
Continually reviewing, implementing, training and updating a firm's cybersecurity program and protocols will help safeguard sensitive and confidential client information and/or data. No law firm wants to be the next data breach headline – so take the necessary steps to avoid a potential disaster.
1 Past ABA Legal Technology Surveys reported 14% in 2016, 15% in 2015, 14% in 2014 and 15% in 2013.
2 On November 1, 2018, California adopted ethics rules patterned after the ABA Model Rules of Professional Conduct.
Ivo Daniele is a seasoned associate in Newmeyer & Dillion's Walnut Creek office. His practice includes representing private and public companies with both their transactional and litigation needs. You can reach Ivo at ivo.daniele@ndlf.com.
About Newmeyer & Dillion
For almost 35 years, Newmeyer & Dillion has delivered creative and outstanding legal solutions and trial results for a wide array of clients. With over 70 attorneys practicing in all aspects of business law, privacy & data security, employment, real estate, construction, insurance law and trial work, Newmeyer & Dillion delivers legal services tailored to meet each client's needs. Headquartered in Newport Beach, California, with offices in Walnut Creek, California and Las Vegas, Nevada, Newmeyer & Dillion attorneys are recognized by The Best Lawyers in America©, and Super Lawyers as top tier and some of the best lawyers in California, and have been given Martindale-Hubbell Peer Review's AV Preeminent® highest rating. For additional information, call 949.854.7000 or visit www.ndlf.com.
Read the court decisionRead the full story...Reprinted courtesy of
Changes to Judicial Selection in Mexico Create a New Case for Contractual ADR Provisions
November 25, 2024 —
Juan Pablo Sandoval - The Dispute ResolverThe Mexican Congress recently discussed and approved a Constitutional Amendment called the “Judiciary Amendment” which was ironically published in the Official Gazette on September 15, 2024, the day before Mexican Independence Day.
With this Judiciary Amendment, the Mexican Congress determined that Federal Judges, Federal Magisters and the Ministers of the Supreme Court will now be elected through direct and popular election. Before the Judiciary Amendment, Federal Judges and Magisters used to have a judicial career; many of them started as law clerks and were promoted step by step until becoming Judge or Magister.
Ministers of the Supreme Court were appointed by the Senate through an election of three candidates designated by the President.
Read the court decisionRead the full story...Reprinted courtesy of
Juan Pablo Sandoval, COMAD, S.C.Mr. Sandoval may be contacted at
jpsandoval@comad.com.mx
Year and a Half Old Las Vegas VA Emergency Room Gets Rebuilt
March 07, 2014 —
Beverley BevenFlorez-CDJ STAFFLess than two years have passed since the billion dollar Las Vegas VA Medical Center construction was completed, and “earthmovers have begun churning the site again, this time to expand the hospital’s emergency room because the existing one is inadequate,” according to the Las Vegas Review-Journal. The new emergency room project is estimated to cost $16 million.
The current emergency room’s design is flawed. “VA officials this week couldn’t explain why the ambulance parking area was designed to be roughly 50 yards from the emergency room’s south entrance, a distance that adds critical seconds to a lifesaving situation,” reported the Las Vegas Review-Journal. Furthermore, VA officials did not confirm “who drew up the flawed design” or who “was responsible for checking the blueprints.”
The Las Vegas Review-Journal also reported that another reason for the expansion is that the current emergency room is too small. A VA spokesman had told the journal that “the emergency room ‘was built based on the workload and the funding that was available at the time,’” yet the journal pointed out that “the number of potential veterans projected to use the center” has remained constant.
Read the court decisionRead the full story...Reprinted courtesy of
Preventing Acts of God: Construction Accidents Caused by Outside Factors
September 20, 2017 —
Christopher G. Hill - Construction Law MusingsFor this week’s Guest Post Friday here at Musings, we welcome back Seth Smiley. Seth, a native of Baton Rouge, is the owner of Smiley Law Firm. He is admitted to practice in all state and federal courts in Louisiana and California. Seth Smiley is the son of a general contractor, and acquired valuable work experience in the construction industry prior to entering law school. He earned his J.D. from Loyola, New Orleans in 2009. In his practice, Seth handles all aspects of construction cases, from initial contracting all the way to final payment once work is complete. Other areas of focus include commercial lease disputes, personal injury, business formation, and insurance property damage claims. Seth loves to fight insurance companies. Seth is currently the primary author of the Smiley Law Blog. The blogs primary focus is to provide value for current and prospective clients regarding trending legal issues in which the attorneys at Smiley Law Firm cover.
There are several factors a construction team can control on a job site. The foreman can ensure scaffolding is secure and that all employees are properly trained, and all workers can take steps to ensure a reasonably safe work site. Accidents can and will happen despite the best efforts of those involved.
Read the court decisionRead the full story...Reprinted courtesy of
Christopher G. Hill, The Law Office of Christopher G. HillMr. Hill may be contacted at
chrisghill@constructionlawva.com
The Value of Photographic Evidence in Construction Litigation
April 26, 2021 —
Marie Mueller - Construction ExecutiveIf a picture is worth a thousand words, can it be worth a thousand dollars? Ten thousand? Maybe, if it provides key evidence in a construction dispute. Litigating a construction case involves each side telling their story. Details and visual context make a story compelling. Evidence and corroboration make a story persuasive. Photographs can help on both of these fronts.
The Value of Photographic Evidence in Construction Litigation
Consider the following examples:
- A dispute relates to the timeliness of particular work. An employee has a memory of a load of materials arriving to the site later than it should have, but the records are incomplete or ambiguous about when it actually occurred. If the employee also took a photo of the materials, on the day they arrived, they could match up the date of the photo to their memory and build a clear timeline.
- A dispute relates to the presence or absence of obstructions in drilled shafts. There are no available photographs or videos of the work due to site restrictions. Presentation of this type of case may be severely limited by not being able to show photos depicting the size, shape and type of material removed from the shafts, and by the lack of video depicting the work.
Reprinted courtesy of
Marie Mueller, Construction Executive, a publication of Associated Builders and Contractors. All rights reserved.
Read the court decisionRead the full story...Reprinted courtesy of
Ms. Mueller may be contacted at
mmueller@verrill-law.com
Second Circuit Affirms Win for General Contractor on No Damages for Delay Provision
September 02, 2024 —
Bill Wilson - Construction Law ZoneIn NASDI, LLC v. Skanska Koch Inc. Kiewit Infrastructure Co. (JV), 2024 WL 1270188 (2d Cir. Mar. 26, 2024), the U.S. Court of Appeals for the Second Circuit affirmed the District Court’s grant of summary judgment dismissing a subcontractor’s delay claim against a general contractor on a public project in New York state. The Court enforced a typical no-damages-for-delay provision to bar the subcontractor’s breach of contract claim. The no-damages-for-delay provision in the subcontract at issue provided:
NO DAMAGE FOR DELAY. Except as otherwise provided …, Subcontractor agrees that it shall have no Claim against Contractor for any loss or damage it may sustain through delay, disruption, suspension, stoppage, interference, interruption, compression, or acceleration of Subcontractor’s Work (‘Delay Damages’) caused or directed by Contractor for any reason, and that all such Claims shall be fully compensated for by Contractor’s granting Subcontractor such time extensions as it is entitled to as a result of any of the foregoing.
Read the court decisionRead the full story...Reprinted courtesy of
Bill Wilson, Robinson & Cole LLPMr. Wilson may be contacted at
wwilson@rc.com
How Berlin’s Futuristic Airport Became a $6 Billion Embarrassment
October 28, 2015 —
Joshua Hammer – BloombergThe inspectors could hardly believe what they were seeing. Summoned from their headquarters near Munich, the team of logistics, safety, and aviation experts had arrived at newly constructed Berlin Brandenburg International Willy Brandt Airport in the fall of 2011 to begin a lengthy series of checks and approvals for the €600 million ($656 million) terminal on the outskirts of the German capital. Expected to open the following June, the airport, billed as Europe’s “most modern,” was intended to handle 27 million passengers a year and crown Berlin as the continent’s 21st century crossroads.
The team of inspectors, known as ORAT, for Operations Readiness and Airport Transfer, brought in a dummy plane and volunteers as test passengers. They examined everything from baggage carousels and security gates to the fire protection system. The last was an especially high priority: None could forget the 1996 fire that roared through Düsseldorf Airport’s passenger terminal, killing 17.
Read the court decisionRead the full story...Reprinted courtesy of
Joshua Hammer, Bloomberg
General Contractors Must Plan to Limit Liability for Subcontractor Injury
May 18, 2011 —
Douglas Reiser in the Builders Counsel BlogIt takes more than a hard hat, but safety checks, a good policy and a smart contract might save you some problems.If you are a general contractor, you will want to pay close attention to this article. A new Washington appellate decision showcases a general contractor’s liability to subcontractors who are injured on the job, when security barriers fail. But can a general limit this liability? Will its contract help?
In Wrought Corporation, Inc., Appellant V. Mario Interiano (quick note: this opinion is unpublished, but we are here to talk about an issue that was not determined on appeal – WISHA compliance), a subcontractor was injured when a security barrier failed and he fell into an elevator shaft.
A jury awarded a $1.56 million verdict against the general contractor, and the court of appeals affirmed on the basis that the general contractor has a non-delegable duty to ensure compliance with the Washington Industrial Safety and Health Act of 1973, codified under RCW 49.17 (WISHA).
Read the full story… Reprinted courtesy of Douglas Reiser of Reiser Legal LLC. Mr. Reiser can be contacted at info@reiserlegal.com
Read the court decisionRead the full story...Reprinted courtesy of
