<!-- wp:paragraph -->
<p><span style="text-decoration: underline;"><strong>UPDATE November 2020 :</strong></span></p>
<!-- /wp:paragraph -->

<!-- wp:paragraph -->
<p>Recently the European National Security Agencgy, ENISA, has published a <a rel="noreferrer noopener" href="https://www.enisa.europa.eu/news/enisa-news/enisa-threat-landscape-2020" target="_blank">report</a> pointting an increase of cyberattacks since the generalisation of WFH (Work From Home, due to the COVID-19 pandemic.</p>
<!-- /wp:paragraph -->

<!-- wp:paragraph -->
<p>Since the ECJ decision in Juily 2020, Schrems-II v Facebook, It has been cleared that no personal data should leave the European Economic Area, EEA, or transferred in the hands of a US Communication Provider, a principle extended to any country not benefiting from an adequacy agreement. Therefore, all legal professions regularly exchanging data outside the EEA, need to take specific measures to ensure the security of these data, at an equivalent level as the protection offered by the GDPR within the EEA. Data subjects whom data are being exported have to be informed in all transparency, of the risks associated to such data transfer.</p>
<!-- /wp:paragraph -->

<!-- wp:quote -->
<blockquote class="wp-block-quote"><p>➡️ “70%_of the data breaches expose e-mails. Although username/e-mail and passwords (i.e credentials) are easily changed in contrast with personal details (i.e. date of birth), the focus is mostly on these in data breaches." </p></blockquote>
<!-- /wp:quote -->

<!-- wp:paragraph -->
<p>Further read :</p>
<!-- /wp:paragraph -->

<!-- wp:heading {"level":4} -->
<h4><a href="https://securityaffairs.co/wordpress/70320/data-breach/panama-papers-epilogue.html" target="_blank" rel="noreferrer noopener">Mossack Fonseca law firm shuts down operations 2 years after Panama Papers</a></h4>
<!-- /wp:heading -->

<!-- wp:heading {"level":4} -->
<h4><a href="https://headtopics.com/fr/rancongiciel-l-enfer-professionnel-des-victimes-au-tribunal-16490877" target="_blank" rel="noreferrer noopener">Rançongiciel : l’«enfer professionnel» des victimes au tribunal</a></h4>
<!-- /wp:heading -->

<!-- wp:quote -->
<blockquote class="wp-block-quote"><p>“Pour moi, il y a eu un avant et un après le mercredi 26 octobre 2016,raconte, la voix ferme et haute, la robe noire de 68 ans, spécialisée en droit corporel.J’ai perdu quatre années de vie, de données et de pratique professionnelle.»</p></blockquote>
<!-- /wp:quote -->

<!-- wp:heading {"level":4} -->
<h4><a href="https://securityboulevard.com/2020/04/insurance-client-sues-small-law-firm-1-5m-for-dark-overlord-payment/" target="_blank" rel="noreferrer noopener">Insurance Client Sues Small Law Firm $1.5M for Dark Overlord Payment</a></h4>
<!-- /wp:heading -->

<!-- wp:quote -->
<blockquote class="wp-block-quote"><p>...the insurance company sued the law firm in federal court in Kansas City. Hiscox Insurance Co., et. al., v. Warden Grier, Dkt. No. 4:20-cv-00237-NKL (E.D. Missouri). The company alleged that the law firm breached its legal obligations under the retainer agreement with the company, that it breached its ethical obligations to protect client confidences, and that it was negligent in failing to protect the client data.</p></blockquote>
<!-- /wp:quote -->

<!-- wp:paragraph -->
<p><a href="https://www.legalfutures.co.uk/latest-news/law-firms-under-constant-cyber-attack" target="_blank" rel="noreferrer noopener"><strong>Law firms under constant cyber-attack</strong></a></p>
<!-- /wp:paragraph -->

<!-- wp:heading {"level":4} -->
<h4><a href="https://www.bbc.com/news/technology-52632729" target="_blank" rel="noreferrer noopener">Hackers hit A-list law firm of Lady Gaga, Drake and Madonna</a></h4>
<!-- /wp:heading -->

<!-- wp:paragraph -->
<p><a href="https://www.thegazette.co.uk/all-notices/content/103439" target="_blank" rel="noreferrer noopener"><strong>Report shows UK law firms unprepared for cyber attacks</strong></a></p>
<!-- /wp:paragraph -->

<!-- wp:paragraph -->
<p>For&nbsp;<a href="https://twitter.com/ICOnews" target="_blank" rel="noreferrer noopener">@ICOnews</a>&nbsp;Firms must protect the personal data of their clients.&nbsp;<a href="https://www.fca.org.uk/news/statements/fca-warns-firms-be-responsible-when-handling-client-data?utm_source=linkedin&amp;utm_medium=information+commissioner%27s+office&amp;utm_term=aa1564be-c90b-4871-a695-e6edf4fa4e37&amp;utm_content=&amp;utm_campaign=" target="_blank" rel="noreferrer noopener">The Financial Conduct Authority warns firms</a>&nbsp;that they must be responsible when they are handling client data.</p>
<!-- /wp:paragraph -->

<!-- wp:heading {"level":4} -->
<h4><a href="https://www.law.com/international-edition/2020/05/25/the-six-biggest-cybersecurity-threats-to-law-firms/?slreturn=20201020113209" target="_blank" rel="noreferrer noopener"><strong>The Six Biggest Cybersecurity Threats to Law Firms</strong></a></h4>
<!-- /wp:heading -->

<!-- wp:heading {"level":4} -->
<h4><a href="https://www.linkedin.com/pulse/law-firm-internet-security-data-protection-tara-taubman-bassirian-llm/" target="_blank" rel="noreferrer noopener"><strong>Law Firm Internet Security and Data Protection</strong></a></h4>
<!-- /wp:heading -->

<!-- wp:paragraph -->
<p>Data breaches are unfortunately becoming more common, and law firms, given the sensitivity – and therefore value – of the data they handle, are falling victim to cyberattacks at an alarming rate.</p>
<!-- /wp:paragraph -->

<!-- wp:quote -->
<blockquote class="wp-block-quote"><p>Just recently, we’ve seen a major data issue at legal software provider Advanced Computer Software,&nbsp;<a href="https://www.law.com/international-edition/2020/05/05/data-from-hundreds-of-law-firms-left-exposed-on-open-platform/" target="_blank" rel="noreferrer noopener">affecting</a>&nbsp;over 190 of the industry’s most prestigious law firms.</p></blockquote>
<!-- /wp:quote -->

<!-- wp:heading {"level":4} -->
<h4><a href="https://www.law.com/legaltechnews/2020/05/21/meet-the-hacker-groups-snatching-law-firms-client-data/" target="_blank" rel="noreferrer noopener"><strong>Meet the Hacker Groups Snatching Law Firms' Client Data</strong></a></h4>
<!-- /wp:heading -->

<!-- wp:quote -->
<blockquote class="wp-block-quote"><p>In nearly six months, at least seven law firms have been infiltrated by ransomware, according to media reports. Of the attacks, hacker groups Maze and REvil have taken responsibility for them all.</p></blockquote>
<!-- /wp:quote -->

<!-- wp:quote -->
<blockquote class="wp-block-quote"><p>Both groups are well-known, said Mark Sangster, vice president and industry security strategist of cybersecurity firm eSentire. And unfortunately for legal, Sangster added, “it seems they lately have turned their focus upon law firms.”</p></blockquote>
<!-- /wp:quote -->

<!-- wp:heading {"level":4} -->
<h4><a href="https://www.linkedin.com/pulse/pourquoi-le-respect-de-la-vie-privee-est-important-tara/" target="_blank" rel="noreferrer noopener"><strong>POURQUOI LE RESPECT DE LA VIE PRIVEE EST UNE IMPERATIVE</strong></a></h4>
<!-- /wp:heading -->

<!-- wp:heading {"level":4} -->
<h4><a href="https://www.zataz.com/piratage-davocats-et-de-magistrats-la-piste-de-la-fuite-de-donnees-sous-la-robe/" target="_blank" rel="noreferrer noopener">Piratage d’avocats et de magistrats, une fuite de données sous la robe ?</a></h4>
<!-- /wp:heading -->

<!-- wp:heading {"level":4} -->
<h4><a rel="noreferrer noopener" href="https://siecledigital.fr/2019/11/13/acces-a-privileges-les-cabinets-davocat-plus-que-jamais-sensibles-aux-tentatives-de-cyberattaque/" target="_blank"><strong>Accès à privilèges : les cabinets d’avocat plus que jamais sensibles aux tentatives de cyberattaque</strong></a></h4>
<!-- /wp:heading -->

<!-- wp:paragraph -->
<p>‘La moitié des entreprises en France et dans le monde a été victime de fraude au cours des 24 derniers mois’ être en conformité&nbsp;<a href="https://twitter.com/hashtag/RGDP?src=hashtag_click" target="_blank" rel="noreferrer noopener">#RGDP</a>&nbsp;aurait sensiblement réduit les risques d’exposition des données.&nbsp;<a href="https://www.lemondedudroit.fr/publications/248-etudes-et-documents/72319-etude-pwc-entreprises-france-monde-fraude.html?utm_source=newsletter_1703&amp;utm_medium=email&amp;utm_campaign=l-hebdo-du-18-novembre-2020-entreprises-et-fraude,-m%C3%A9diation,-elections-ordinales-paris-2020,-proposition-de-loi-relative-%C3%A0-la-s%C3%A9curit%C3%A9-globale" target="_blank" rel="noreferrer noopener">Le Monde du Droit</a></p>
<!-- /wp:paragraph -->

<!-- wp:paragraph -->
<p>A lire plus en detail <a rel="noreferrer noopener" href="https://www.village-justice.com/articles/les-professionnels-droit-protection-des-donnees,37019.html" target="_blank">LES PROFESSIONNELS DU DROIT ET LA PROTECTION DES DONNÉES.</a></p>
<!-- /wp:paragraph -->

<!-- wp:heading {"level":4} -->
<h4><a href="https://www.lepoint.fr/justice/le-monde-judiciaire-francais-cible-par-une-vaste-cyberattaque-06-09-2020-2390539_2386.php" target="_blank" rel="noreferrer noopener"><strong>Le monde judiciaire français ciblé par une vaste cyberattaque</strong></a></h4>
<!-- /wp:heading -->

<!-- wp:heading {"level":4} -->
<h4><a href="https://wilo.blog/avocats-cyber-attaques/#:~:text=Avec%20des%20infrastructures%20de%20protection,%C3%A9manant%20de%20ces%20grands%20groupes.&amp;text=Ce%20sont%20des%20cibles%20parfaites,carrefour%20de%20donn%C3%A9es%20inatteignables%20habituellement." target="_blank" rel="noreferrer noopener"><strong>Cabinets d’avocats : la cible idéale des cyber-attaques</strong></a></h4>
<!-- /wp:heading -->

<!-- wp:heading {"level":4} -->
<h4><a href="https://www.linkedin.com/pulse/why-should-we-all-care-panamapapers-tara-taubman-bassirian/" target="_blank" rel="noreferrer noopener"><strong>Un système informatique non sécurisé du cabinet d'affaires Mossac Fonseka est ce qui a permis la divulgation des Panama Papers</strong></a><strong>.&nbsp;</strong><a href="https://www.wired.co.uk/article/panama-papers-mossack-fonseca-website-security-problems" target="_blank" rel="noreferrer noopener">The security flaws at the heart of the Panama Papers</a></h4>
<!-- /wp:heading -->

<!-- wp:heading {"level":4} -->
<h4><a href="https://www.lemondeinformatique.fr/actualites/lire-revil-decryptage-du-plus-terrible-des-ransomware-81071.html" target="_blank" rel="noreferrer noopener"><strong>REvil : décryptage du plus terrible des ransomware</strong></a></h4>
<!-- /wp:heading -->

<!-- wp:paragraph -->
<p><a href="https://www.presse-citron.net/donnees-personnelles-plusieurs-celebrites-volees-cabinet-avocat/" target="_blank" rel="noreferrer noopener"><strong>Des données personnelles de plusieurs célébrités ont été volées à un cabinet d’avocat</strong></a></p>
<!-- /wp:paragraph -->

<!-- wp:heading {"level":4} -->
<h4><a href="https://www.reuters.com/article/us-cyber-insidertrading-idUSKBN14G1D5" target="_blank" rel="noreferrer noopener">U.S. accuses Chinese citizens of hacking law firms, insider trading</a></h4>
<!-- /wp:heading -->

<!-- wp:quote -->
<blockquote class="wp-block-quote"><p>Three Chinese citizens have been criminally charged in the United States with trading on confidential corporate information obtained by hacking into networks and servers of law firms working on mergers, U.S. prosecutors said on Tuesday.</p></blockquote>
<!-- /wp:quote -->

<!-- wp:paragraph -->
<p>🌸.&nbsp;<a href="https://www.linkedin.com/in/ACoAADJzMWwB2pVioRKkjCwNeb_bKb_ozIlILSo" target="_blank" rel="noreferrer noopener">Marie-Hélène FABIANI</a>&nbsp;@Carole Painblanc cc&nbsp;<a href="https://www.linkedin.com/in/ACoAAAJArAwBvrFHET0vbliw4F0fXXcrAngsoTo" target="_blank" rel="noreferrer noopener">François RUHLMANN-FOURNIER - Avocat, Médiateur et Arbitre</a>&nbsp;cc&nbsp;<a href="https://www.linkedin.com/in/ACoAAAlsgycBbEKr76ndxvuNefocrWK_dEDoN3w" target="_blank" rel="noreferrer noopener">Clotilde LEPETIT</a>&nbsp;cc&nbsp;<a href="https://www.linkedin.com/in/ACoAAABdePIBE5xRJAbWs73tb8GdtCgjnDDrIlw" target="_blank" rel="noreferrer noopener">Brigitte Bogucki</a>&nbsp;cc&nbsp;<a href="https://www.linkedin.com/in/ACoAAAFCA8wB5IF2_EN_7w_KbakwWlFCaa_yaZI" target="_blank" rel="noreferrer noopener">Xavier Autain</a>&nbsp;cc&nbsp;<a href="https://www.linkedin.com/in/ACoAABkVY40BF4HVRzDvIXDIJAoP7ay1DQAS1LM" target="_blank" rel="noreferrer noopener">Julie Couturier</a>&nbsp;cc&nbsp;<a href="https://www.linkedin.com/in/ACoAAA5BdcgBMOZ8YDknixl47fJYnMcQgiJbMsk" target="_blank" rel="noreferrer noopener">Vincent Nioré</a>&nbsp;cc&nbsp;<a href="https://www.linkedin.com/in/ACoAAB4hqL0BMOeLJz57FZAV_1r99R932vX9U6o" target="_blank" rel="noreferrer noopener">Nathalie ATTIAS</a>&nbsp;cc&nbsp;<a href="https://www.linkedin.com/in/ACoAACSBDpgBnLfbijuy03AaOYNq0c54ZXRO5ow" target="_blank" rel="noreferrer noopener">geneviève CATTAN</a>&nbsp;cc&nbsp;<a href="https://www.linkedin.com/in/ACoAAAtLk9EBfdVSoqmOT6VQ-8b3QcV0e07ef0E" target="_blank" rel="noreferrer noopener">Margaux Durand-Poincloux</a>&nbsp;cc&nbsp;<a href="https://www.linkedin.com/in/ACoAAAdmWVcBWpDtDnffRPdPiznX9cj4dqIraRw" target="_blank" rel="noreferrer noopener">Chloe Bouchez</a>&nbsp;cc&nbsp;<a href="https://www.linkedin.com/in/ACoAAAB6rAEB4x7Sl-ghKoA-3SWVgi_zYZ2wWTo" target="_blank" rel="noreferrer noopener">Joëlle Monlouis</a></p>
<!-- /wp:paragraph -->

<!-- wp:paragraph -->
<p>👨‍🎓. Cybersécurité ➡️ Ransomware ➡️ Data Breach</p>
<!-- /wp:paragraph -->

<!-- wp:paragraph -->
<p>➡️ Sensitive data ➡️. ENCRYPTION</p>
<!-- /wp:paragraph -->

<!-- wp:paragraph -->
<p>➡️ Transmission des données hors EEA</p>
<!-- /wp:paragraph -->

<!-- wp:paragraph -->
<p>➡️ CEJ Schrems-II ➡️ Cookies ➡️ Directive ePrivacy</p>
<!-- /wp:paragraph -->

<!-- wp:paragraph -->
<p>➡️ Planet49 ➡️ Fashion ID</p>
<!-- /wp:paragraph -->

<!-- wp:paragraph -->
<p>La&nbsp;<a href="https://www.linkedin.com/feed/hashtag/?keywords=cybers%C3%A9curit%C3%A9&amp;highlightedUpdateUrns=urn%3Ali%3Aactivity%3A6734106584634408960" target="_blank" rel="noreferrer noopener">#cybersécurité</a>&nbsp;des cabinets d’avocats ? Parlons-en avec la Présidente du&nbsp;<a href="https://www.linkedin.com/company/conseil-national-des-barreaux-les-avocats/" target="_blank" rel="noreferrer noopener">CNB Conseil national des barreaux - les avocats</a>,&nbsp;<a href="https://www.linkedin.com/in/ACoAAAQs76YBkocjrI9EdzSBrVT4nET9rpVE5KU" target="_blank" rel="noreferrer noopener">Christiane Féral-Schuhl</a>: "Désormais la cybersécurité fait partie de la pratique quotidienne de l’avocat" &gt;&nbsp;<a href="https://lnkd.in/dUwUPh9" target="_blank" rel="noreferrer noopener">https://lnkd.in/dUwUPh9</a></p>
<!-- /wp:paragraph -->

<!-- wp:paragraph -->
<p>Mossack Fonseca hack and the Panama Papers scandal should have been a wake up call for all law firms to take clients data security more seriously. Here is&nbsp;<a href="http://www.linkedin.com/pulse/why-should-we-all-care-panamapapers-tara-taubman-bassirian" target="_blank" rel="noreferrer noopener">Why we Should All Care About Panamapapers</a>&nbsp;even if we have no offshore investment.</p>
<!-- /wp:paragraph -->

<!-- wp:paragraph -->
<p>Law Firm Cybersecurity is at high risk. Dozens of big firms are targeted by hackers seeking for sensitive financial information. Major law firms including Cravah and Will Gotshal have suffered data breach. FBI has issued warnings. Still too many use insecure email exchange for information transfer.</p>
<!-- /wp:paragraph -->

<!-- wp:paragraph -->
<p><a href="http://www.pearltrees.com/idigital/firms-data-security-liability/id15689736#item172505250" target="_blank" rel="noreferrer noopener"><em>Threats of Litigation After Data Breaches at Major Law Firms.</em></a></p>
<!-- /wp:paragraph -->

<!-- wp:quote -->
<blockquote class="wp-block-quote"><p>...both&nbsp;Weil Gotshal &amp; Manges and Cravath, Swaine &amp; Moore as well as other firms have suffered data breaches in recent months, put new attention on the potential consequences for&nbsp;law firms with lax security.</p></blockquote>
<!-- /wp:quote -->

<!-- wp:paragraph -->
<p><a href="http://www.pearltrees.com/idigital/firms-data-security-liability/id15689736/item197407102" target="_blank" rel="noreferrer noopener">Daniel Solove</a>, US privacy scholar wrote</p>
<!-- /wp:paragraph -->

<!-- wp:quote -->
<blockquote class="wp-block-quote"><p>Law firms are facing grave privacy and security risks. Although a number of firms are taking steps to address these risks, the industry as a whole needs to grasp the severity of the risk. For firms, privacy and security risks can be significantly higher than for other organizations. Incidents can be catastrophic. On a scale of 1 to 10, the risks law firms are facing are an 11.</p></blockquote>
<!-- /wp:quote -->

<!-- wp:paragraph -->
<p>Daniel Solove describes the situation and offers solutions to avoid the harms caused to the reputation and clients of a law firm attacked.</p>
<!-- /wp:paragraph -->

<!-- wp:paragraph -->
<p>Just as an example, here is a&nbsp;<a href="http://www.pearltrees.com/idigital/firms-data-security-liability/id15689736#item197405827" target="_blank" rel="noreferrer noopener">List of data breaches and cyber attacks in February 2017</a>. Recently,&nbsp;<a href="http://www.pearltrees.com/idigital/firms-data-security-liability/id15689736#item197405905" target="_blank" rel="noreferrer noopener">1500 companies in over 100 countries hit by malicious Adwind backdoor&nbsp;RAT</a>.</p>
<!-- /wp:paragraph -->

<!-- wp:paragraph -->
<p>The CNIL, French Data Protection Authority has been publishing advices, including&nbsp;<a href="http://www.pearltrees.com/idigital/firms-data-security-liability/id15689736#item197404361" target="_blank" rel="noreferrer noopener">easy ways of encryption</a>. I still hear Solicitors, lawyers, Notaries, exchanging sensitive data via simple emails or Dropbox. These are recipes for disaster and lack of consideration for clients. Apart from the reputation disaster, the&nbsp;<a href="http://www.linkedin.com/pulse/all-you-need-know-gdpr-compliance-tara-taubman-bassirian?trk=mp-reader-card" target="_blank" rel="noreferrer noopener">GDPR</a>&nbsp;new EU data protection regulation has serious fines to consider. Think well before too late : 20M Euro or 4% of world turnover fines.</p>
<!-- /wp:paragraph -->

<!-- wp:paragraph -->
<p>Sometimes the treat comes from an insider. You might want to monitor live transfer of data from your network. If your employees bring their own devices, here is a good advice from the&nbsp;<a href="http://www.pearltrees.com/idigital/firms-data-security-liability/id15689736/item197407102" target="_blank" rel="noreferrer noopener">UK ICO</a>.</p>
<!-- /wp:paragraph -->

<!-- wp:paragraph -->
<p>I keep my sources of information updated on&nbsp;<a href="http://www.pearltrees.com/idigital/gdpr-new-text/id15747243#item175275842" target="_blank" rel="noreferrer noopener">Pearltrees</a>&nbsp;curation:</p>
<!-- /wp:paragraph -->

<!-- wp:list -->
<ul><li><a href="http://www.pearltrees.com/idigital/firms-data-security-liability/id15689736" target="_blank" rel="noreferrer noopener">Law Firm data security</a></li><li>The&nbsp;<a href="http://www.pearltrees.com/idigital/firms-data-security-liability/id15689736" target="_blank" rel="noreferrer noopener">Panamapapers</a>&nbsp;scandal and the law firm Mossack Fonseca.</li><li><a href="https://www.law.com/legaltechnews/2018/12/27/5-cybersecurity-habits-law-firms-should-kick-in-2019/?slreturn=20181127165526" target="_blank" rel="noreferrer noopener">5 Cybersecurity Habits Law Firms Should Kick in 2019</a></li><li>Read&nbsp;<a href="https://www.linkedin.com/pulse/website-transparency-cookies-privacy-notice-taubman-bassirian-llm/" target="_blank" rel="noreferrer noopener">Website Transparency and Cookies and Privacy Notices</a></li><li>Read&nbsp;<a href="https://www.linkedin.com/pulse/gdpr-material-territorial-scopes-tara-taubman-bassirian-llm/" target="_blank" rel="noreferrer noopener">GDPR Material and Territorial Scope</a></li><li>Read&nbsp;<a href="https://www.linkedin.com/pulse/all-you-need-know-gdpr-compliance-tara-taubman-bassirian/" target="_blank" rel="noreferrer noopener">All You Need to Know About GDPR</a></li><li>This work is licensed under a&nbsp;<a href="http://creativecommons.org/licenses/by/4.0/" target="_blank" rel="noreferrer noopener">Creative Commons Attribution 4.0 International License</a>.</li></ul>
<!-- /wp:list -->