Small Law Firms Bear the Brunt of 2025’s Cyberattack Surge In 2025, cyberattacks on law firms continued to escalate, with smaller practices emerging as the most frequent targets of data breaches, according to an analysis by Law360 Pulse. The trend shows no signs of slowing, underscoring the persistent vulnerability of legal organizations to cyber threats. The report highlights that smaller firms, often lacking the robust security infrastructure of larger counterparts, accounted for the majority of reported incidents. While the exact scale of breaches remains unclear, the findings reflect broader industry concerns about the growing sophistication of attacks and the challenges firms face in defending sensitive client data. The surge in breaches comes amid rising risks tied to third-party vendors, remote work, and the increasing use of legal AI tools some of which have been linked to security vulnerabilities. As law firms handle highly confidential information, the financial and reputational consequences of such incidents remain a critical concern for the sector. The analysis serves as a reminder of the ongoing cybersecurity risks facing legal practices, particularly those with limited resources to invest in advanced protections.