Law Firm Cyberattacks Grow, Putting Operations in Legal Peril

Law firms that rake in dollars defending companies against cyberattack lawsuits are increasingly finding themselves targets, with five class actions filed so far this year alleging the legal operations failed to protect client data.

Bryan Cave Leighton Paisner and other firms facing suits represent a sweet spot for corporate cyberattackers because valuable data is stored there—from employee information such as health and financial data, to Social Security numbers, to patent specifications and merger and acquisition plans.

“Whatever drawer you open, you will find something top secret and valuable,” said John Reed Stark, a cybersecurity consultant and former enforcer for ...