Two major Canadian law firms hit by data breaches affecting thousands of files
McCarthy Tétrault and Davies suffer cyberattacks compromising client information on confidential M&A deals and litigation files.
What to know
- Two of Canada's largest corporate law firms—McCarthy Tétrault and Davies—suffered cyberattacks within 24 hours, compromising thousands of files containing sensitive client data on confidential M&A deals and litigation.
- McCarthy Tétrault lost approximately 31,000 files according to an insider; Davies had one account compromised; other major Bay Street firms confirmed they were unaffected.
- Both firms store privileged communications and confidential information about major deals not yet announced, raising stakes for clients and potentially affecting market-sensitive transactions.
McCarthy Tétrault LLP Major Canadian corporate law firmDavies Ward Phillips & Vineberg LLP Major Canadian corporate law firmThe Globe and Mail Reporting outlet
How it unfolded 1 development · click the chart to see its coverage articlesposts
-
1
Globe and Mail reports breaches affected 31,000 files at McCarthy Tétrault
The Globe and Mail breaks the story of the two law firm breaches, reporting that McCarthy Tétrault had 31,000 files stolen according to a source directly involved, though the firm declined to confirm the number. Six other major Bay Street law firms confirmed they were not affected.
“The investigation has since identified that an unauthorized third party gained access to certain files, including information relating to clients.”
— McCarthy Tétrault, Law firm statement · source -
first by The Globe and Mail, 13d ago
-
Corporate law firm McCarthy Tétrault hit by data breach https://www. theglobeandmail.com/business/a rticle-corporate-law-firm-mccarthy-tetrault-hit-by-major-data-breach/?utm_source=flipboard&utm_medium=activitypub Posted into Business @ business-globeandmail
-
-
background
Both firms engage cybersecurity experts and notify clients — McCarthy Tétrault and Davies worked with cybersecurity firms to determine the extent of the breaches and began reaching out to clients throughout the week to inform them of the compromised data.
-
background
Davies experiences cyberattack — Davies Ward Phillips & Vineberg LLP suffered a cyberattack on October 23 that resulted in compromise of information from one account.
-
background
McCarthy Tétrault detects data breach — McCarthy Tétrault caught an unauthorized breach late on October 22, discovering that a third party had gained access to certain client files.