Law Firm Cybersecurity Bemoaned In Citigroup Report

An internal Citigroup report, obtained by the New York Times, warned that law firms are at high risk for “cyberintrusions” and said that in fact major law firms have in fact been breached, but that it’s hard to know the extent of the problem because most law firms are close-mouthed about it. The report, citing information it obtained from a security consulting firm, named Covington & Burling and Fried Frank as firms that had been targeted, but it made clear that in neither of those cases did the episode amount to a breach. Last week a Citigroup spokesperson issued a statement saying it had apologized to several parties mentioned in the report for not giving them the opportunity to respond before the report was published.