New York's oldest law firm hacked, over 90k clients affected

The cyberattack on white-shoe law firm Cadwalader, Wickersham & Taft has put the personal information of over 90,000 clients at risk.

On the notice to the affected clients on March 30, 2023, the prestigious law firm stated that an unauthorized third party gained remote access to the company’s systems on November 15, 2022.

Reportedly, the hackers were able to acquire sensitive information from the network, which included documents containing personal information belonging to the company’s customers, including names and Social Security numbers.

The Office of the Maine Attorney General said that the current breach was discovered on November 16, 2022, and that 93,211 people were affected.

Founded in 1792, Cadwalader, Wickersham & Taft is the oldest continuously operating legal practice in the United States.

Identity theft risk

According to the notice, there is currently no evidence to suggest that the personal information of affected clients has been leaked or misused by an unauthorized third party.

The practice claims to conduct targeted online monitoring to ensure that any such activities are detected and addressed in a timely manner.

It warned that if any unauthorized access or misuse of personal information were to occur, it would expose clients to a “greater risk of identity theft or fraud, financial loss, and non-material loss.”

Under investigation

According to a notice, the law firm immediately moved to halt the breach as soon as it was detected and launched an investigation with the assistance of cybersecurity experts.

“We have also reported this incident to law enforcement and relevant regulators, as well as taking steps to further strengthen our network,” stated Cadwalader, Wickersham & Taft.

In response to the attack, the company strongly advises clients to remain vigilant and carefully review their online and financial accounts for any suspicious activity.

If any such activity is detected, clients are advised to promptly change account password and security questions and inform the relevant financial institution. The law firm also stresses the importance of swiftly reporting any fraudulent activity or suspected incidents of identity theft to the authorities.

The company has offered free identity theft protection to affected clients and urges them to take advantage of this service.