Email Hijacking Threatens Law Firms Amid Rising Cyber Attacks

• •43% of UK businesses experienced a cyber security breach in the past year.
• •Email hijacking and BEC attacks pose significant risks to law firms.
• •Phishing remains the most common form of cyber attack.

Law firms are increasingly targeted by cyber criminals through email hijacking and Business Email Compromise (BEC) attacks. According to the UK Government's Cyber Security Breaches Survey from April 2026, 43% of UK businesses faced a cyber security breach, with phishing being the most common attack vector. Email hijacking allows attackers to gain access to trusted email accounts, monitor communications, and exploit opportunities to steal money or sensitive information. The legal sector's handling of high-value data and financial transactions makes it particularly attractive to cyber criminals. Recent incidents highlight the severe consequences of successful attacks, including exposure of confidential client information and potential regulatory investigations. Firms may face reporting obligations to the Information Commissioner's Office (ICO) and the Solicitors Regulation Authority (SRA). Immediate response steps include isolating affected systems and notifying cybersecurity personnel.