Allen & Overy Hit by Cyberattack on ‘Small Number’ of Servers

Hackers recently launched a cyberattack on Allen & Overy, a “data incident” that the law firm says affected a small number of its servers.

An investigation found that the firm’s core systems, including its email and document management programs, were not impacted by the hack, an A&O spokesperson said.

“The firm continues to operate normally with some disruption arising from steps taken to contain the incident,” A&O said in a written statement. “As a matter of priority, we are assessing exactly what data has been impacted, and we are informing affected clients.”

The incident is the latest in a long line of hacks against law firm systems that in recent months also have targeted Bryan Cave Leighton Paisner, Proskauer Rose, Kirkland & Ellis, DLA Piper, K&L Gates, and Orrick Herrington & Sutcliffe.

A&O’s technical response team, working with an independent cybersecurity adviser, took “immediate action” to contain the incident, according to the spokesperson. The investigation is ongoing.

“Keeping our clients’ data safe, secure, and confidential is an absolute priority,” the spokesperson said.

The UK-founded firm is in the midst of a massive transatlantic merger with New York’s Shearman & Sterling. Partners at both firms in October voted to approve the combination, which is set to create a 3,900-lawyer behemoth.

The merger is expected to be completed by May 2024.

"(O)ur systems are entirely separate so this incident will have no impact on Shearman’s systems,” the spokesperson said.