AI-Driven Cyberattacks Surge, Law Firms Among Major Targets
Article Content
- •Cyberattacks on law firms have doubled in 2026, reaching 13% of firms surveyed.
- •AI-driven attacks are increasingly common, with a 56% rise reported this year.
- •The average cost of a data breach is now $4.99 million, with AI-driven incidents averaging $6 million.
Recent reports indicate a significant rise in cyberattacks, particularly targeting law firms, with AI-driven methods becoming prevalent. The 2026 Law Firm Technology Survey revealed that cyber incidents at law firms have doubled from 6% in 2025 to 13% in 2026. Notably, IBM's Cost of a Data Breach Report found the average cost of a data breach has risen to $4.99 million, with AI-driven attacks costing around $6 million each. The IRONSCALES Cybersecurity Threat Report highlights that 77% of organizations experienced AI-related security incidents in the past year, with common attack vectors including phishing and social engineering. Law firms like Weil, Gotshal & Manges and Buchalter have reported significant breaches, exposing sensitive client information. Experts warn that outdated cybersecurity measures increase vulnerability, especially as cybercriminals leverage AI to enhance their attacks. The legal sector's reliance on confidential data makes it a prime target for these sophisticated threats.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track shinyhunters and Arrowhead Regional Medical Center in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What types of organizations are affected?
What is the average cost of a data breach?
How are AI tools being exploited?
Continue Reading
Critical Zero-Day Exploited in BeyondTrust Remote Support by China-linked Group A critical vulnerability in BeyondTrust Remote Support, tracked as CVE-2026-102764 with a CVSS score of 9.3, has been exploited by the China-linked espionage group Armory Castle since August 29, 2026. This flaw allows unauthenticated remote attackers to perform file operations, gaining root control and access to…
Silent Lynx Targets CIS Governments via WinRAR Exploit The threat actor Silent Lynx has launched a series of attacks against government organizations in the Commonwealth of Independent States (CIS) from June 2025 to August 2026. These attacks exploit a vulnerability in WinRAR (CVE-2025-8088) to deploy reverse shells, including FoalShell and PickleShell, facilitating…