Privilege doesn't protect a file someone has already stolen.
Law firms sit on confidential litigation strategy, commercial deals, family matters and, for conveyancers, large sums moving through trust accounts. Criminals target them precisely because the information is sensitive and the money moves fast.
Where firms are most exposed
Trust-account payment fraud
Attackers who gain access to a firm's email watch for property transfers, then send buyers or the firm itself 'updated' banking details at exactly the right moment.
Mailbox compromise
A single stolen password can expose years of privileged correspondence, and let attackers impersonate a partner convincingly.
High-value documents
Merger documents, divorce settlements and litigation files can be used for extortion or sold, which makes data theft as damaging as encryption.
Shared access and long careers
Candidate attorneys, secretaries and correspondents come and go, and old accounts and shared passwords tend to linger.
POPIA, privilege and your duty of care
POPIA applies to the personal information in every matter file, and section 19 requires you to protect it with reasonable technical and organisational measures. Many matters also involve special personal information, such as criminal records, health information in personal injury claims and children's information in family law.
Beyond POPIA, a breach can put you at odds with your professional duty of confidentiality and, if trust money is lost, create claims against the firm. Being able to show that devices were monitored and threats acted on is a far stronger position than having a policy no one could verify.
Stopping the attack before the payment instruction goes out
Payment fraud usually starts days before the fake email is sent: (Illustrative example.)
- Day 1A conveyancing secretary downloads what looks like a signed offer to purchase. It contains malware designed to steal saved passwords from the browser.
- Day 1EZ Cyber Guard detects the malware activity on that workstation and alerts the firm, explaining what the program tried to do.
- Day 1The firm isolates the machine and resets the affected passwords from a clean device, before the attacker can use them.
- Day 9Transfer day comes and goes normally. The attacker never got far enough to send a fake banking-details letter.
Built for law firms without a security team
Malware and behaviour detection
Catch password-stealing malware and suspicious activity on the devices your team uses for email and matter files.
Intrusion detection and log collection
Unusual access patterns and failed log-ins across your workstations and servers are collected and analysed in one place.
AI-explained alerts
Partners get a clear explanation of what happened and what to do, without needing to read raw security logs.
Security reports
Regular reports on incidents and endpoint health that you can share with management, clients or your insurer.
Common questions
Recommended reading: Microsoft 365 security settings every small business should switch on
Protect your law firm, starting today
Start a 7-day free trial and see your devices' security posture within minutes. No card required.
Not ready for a trial?Take the free 3-minute POPIA Security Readiness Check