FAQ on Cybersecurity Threats and Backup Practices in the Legal Industry

What is the main focus of the Fenix24 and ILTA report?

The report focuses on the current cybersecurity practices, gaps, and risks facing legal organizations worldwide, with phishing identified as the top threat.

Why is phishing considered a significant threat to law firms?

Phishing is significant because it represents a shift towards more sophisticated, human-operated attack methods, surpassing traditional concerns like ransomware and user behavior.

How prepared are law firms for cyber attacks according to the report?

Many law firms are unprepared, with only 50% having immutable backups and a decline in security confidence from 50% in 2023 to 38% in 2024.

What are immutable backups and why are they important?

Immutable backups are backup systems that cannot be altered or deleted, crucial for restoring operations after an attack, yet only 27% of firms prioritize them as a top security control.

What is the state of Multi-Factor Authentication (MFA) usage in law firms?

MFA coverage is inconsistent, with only 18% of firms applying it to production storage and 37% to backup storage, despite its importance in defending against ransomware.

What trends are making law firms more vulnerable to cyber threats?

Trends include underutilization of immutable backups, inconsistent MFA coverage, declining security confidence, and persistent access and lateral movement weaknesses.

Who is most affected by these cybersecurity threats?

Legal organizations worldwide are affected, facing risks of disruption, data loss, and extortion by skilled threat actors targeting sensitive client data.

What can law firms do to improve their cybersecurity posture?

Firms should invest in immutable backups, consistent MFA coverage, external assessments, tabletop exercises, and develop tested incident response plans to enhance recovery readiness.

Where can I find the full report?

The full report can be accessed at: https://fenix24.com/iltareport2025/.

Who should law firms contact for more information on cyber resilience?

Law firms can contact Fenix24, an industry-leading cyber disaster recovery company, for more information on assured and battle-tested cyber resilience solutions.