{"id":689,"date":"2026-08-17T10:00:00","date_gmt":"2026-08-17T14:00:00","guid":{"rendered":"https:\/\/blog.integrityfirstins.biz\/?p=689"},"modified":"2026-08-17T10:13:20","modified_gmt":"2026-08-17T14:13:20","slug":"cyber-risk-for-law-firms-people-vendors-and-insurance-coverage","status":"publish","type":"post","link":"https:\/\/blog.integrityfirstins.biz\/?p=689","title":{"rendered":"Cyber Risk for Law Firms: People, Vendors, and Insurance Coverage"},"content":{"rendered":"\n<figure class=\"wp-block-embed is-type-video is-provider-youtube wp-block-embed-youtube wp-embed-aspect-16-9 wp-has-aspect-ratio\"><div class=\"wp-block-embed__wrapper\">\n<iframe loading=\"lazy\" title=\"Verizon Data Breach Report Pt. 2 - Cyber Risk for Law Firms: People, Vendors, and Insurance Coverage\" width=\"584\" height=\"329\" src=\"https:\/\/www.youtube.com\/embed\/TCzvouvWiV8?feature=oembed\" frameborder=\"0\" allow=\"accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share\" referrerpolicy=\"strict-origin-when-cross-origin\" allowfullscreen><\/iframe>\n<\/div><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/blog.integrityfirstins.biz\/?p=677\">In Part 1<\/a>, we talked about <a href=\"https:\/\/www.verizon.com\/business\/resources\/reports\/dbir\/?cmp=2025:05:ge:us::ns:pre:pse:goo::ao:8888855284:_ds_cid_23650782601_ds_agid_191363899622&amp;utm_term=verizon%20data%20breach%20investigations%20report&amp;utm_medium=cpc&amp;utm_source=google&amp;utm_campaign=GGL_ENT_BND_DBIR+Report&amp;utm_content=Enterprise&amp;gclsrc=aw.ds&amp;gad_source=1&amp;gad_campaignid=23650782601&amp;gbraid=0AAAAABymyRGokWVKzpQ6g16nk1Boe1ujJ&amp;gclid=CjwKCAjwj7HTBhBiEiwA8s35OjGDjfSRnNUdpN143D_9S87ZpxNg_OgXytnKbv_4MDIjU_FhpDX36hoC5qoQAvD_BwE\">Verizon\u2019s 2026 Data Breach Investigations Report<\/a> and why law firms should pay attention to vulnerability exploitation and ransomware.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Now let\u2019s talk about two other issues that are especially important for law firms: the human element and third-party risk.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The human element continues to play a major role in data breaches. The 2026 Verizon report found that the human element was present in 62% of breaches. That does not mean employees are bad. It does not mean lawyers or staff members are careless. It means people are busy, and cybercriminals know how to take advantage of that.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Lawyers, paralegals, office managers, and administrative staff deal with emails, phone calls, text messages, invoices, attachments, wire instructions, document requests, calendar invitations, and client questions all day long. In that environment, one message that looks legitimate can create a serious problem.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">And these attacks are not limited to the obvious <a href=\"https:\/\/www.youtube.com\/watch?v=UImYfdAiLgU\">phishing email <\/a>with poor grammar and misspelled words. Verizon\u2019s report points out that social engineering is moving beyond email. Attackers are using phone calls, text messages, mobile devices, fake IT support requests, fake vendor communications, and fake client messages. Verizon\u2019s SMB-focused summary also notes that mobile-based phishing simulations had a 40% higher median success rate than email-based simulations.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>For law firms, that should get your attention.<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A fake wire instruction can lead to a financial loss. A fake password reset can give someone access to your systems. A fake document link can compromise a computer. A fake call from \u201cIT support\u201d can trick someone into sharing access. A fake email that appears to come from a client can start a chain of events that becomes much larger than one message.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">So the question should not be, \u201c<em>Does this message look real?<\/em>\u201d<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The better question is, \u201c<em>Did we verify this through a trusted process?<\/em>\u201d<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">That is an important distinction. Cybercriminals are trying to create urgency. They want someone to act quickly. They want someone to skip the normal process. That is why law firms need written procedures for payment changes, wire instructions, password resets, file access, and unusual client or vendor requests.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If new wire instructions are received, they should be verified through a known phone number already on file &#8211; not the number in the email. If someone requests access to sensitive information, there should be a clear approval process. If someone claims to be from IT support, staff should know how to confirm that request before giving access.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The second issue is third-party risk.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Most law firms rely on outside vendors. That is normal. But it also means your cyber risk is not limited to what happens inside your own office. Verizon\u2019s 2026 report found that breaches involving third parties increased and now account for 48% of breaches.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Think about the vendors that may touch a law firm\u2019s data or systems: IT providers, cloud software companies, case management platforms, document storage systems, billing software, phone providers, payment processors, marketing vendors, and other outside services.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If those vendors have access to your data, your systems, or your credentials, their security matters too.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">That does not mean every law firm needs to conduct a full-scale security audit of every vendor. But firms should be asking basic questions before there is a problem.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Do they use multifactor authentication? Do they have written security procedures? Do they carry cyber insurance? What happens if they have a breach involving your data? Who has to notify whom? Who pays for what? How quickly will you know?<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Those questions are much easier to ask before something goes wrong.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The same is true for your own cyber insurance coverage.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A law firm should know what its policy actually covers before there is a claim. Does the policy provide coverage for ransomware? Business interruption? Data restoration? Breach response costs? Social engineering fraud? Funds transfer fraud?<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Are there sublimits? Are there exclusions? Are there conditions that must be satisfied before coverage applies?<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">And one of the most important questions is this: did the firm accurately answer the questions on the cyber insurance application?<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If the application says the firm has multifactor authentication, but MFA is only being used in some places \u2014 or not at all \u2014 that can become a very serious issue after a claim. If the application says backups are being performed and tested, but no one has verified that, the firm may have a problem when coverage is needed most.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The lesson from the 2026 Verizon report is not that law firms should panic. It is that law firms should prepare.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Review your procedures. Review your vendors. Review your cyber insurance. Make sure your written practices match what is actually happening inside the firm.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Because when a cyber incident happens, the issue is not only whether your computers can be restored.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The issue is whether your firm can keep operating, protect your clients, meet your obligations, and recover financially.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">And the worst time to find out you are not prepared is after the breach.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>In Part 1, we talked about Verizon\u2019s 2026 Data Breach Investigations Report and why law firms should pay attention to vulnerability exploitation and ransomware. Now let\u2019s talk about two other issues that are especially important for law firms: the human &hellip; <a href=\"https:\/\/blog.integrityfirstins.biz\/?p=689\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5,41,17],"tags":[],"class_list":["post-689","post","type-post","status-publish","format-standard","hentry","category-cyber-liability-insurance","category-cyber-security","category-risk-management"],"_links":{"self":[{"href":"https:\/\/blog.integrityfirstins.biz\/index.php?rest_route=\/wp\/v2\/posts\/689","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.integrityfirstins.biz\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.integrityfirstins.biz\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.integrityfirstins.biz\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.integrityfirstins.biz\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=689"}],"version-history":[{"count":3,"href":"https:\/\/blog.integrityfirstins.biz\/index.php?rest_route=\/wp\/v2\/posts\/689\/revisions"}],"predecessor-version":[{"id":694,"href":"https:\/\/blog.integrityfirstins.biz\/index.php?rest_route=\/wp\/v2\/posts\/689\/revisions\/694"}],"wp:attachment":[{"href":"https:\/\/blog.integrityfirstins.biz\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=689"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.integrityfirstins.biz\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=689"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.integrityfirstins.biz\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=689"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}