conv.

All stories
SecurityQuiet 13d · day 13

Two major Canadian law firms hit by data breaches affecting thousands of files

McCarthy Tétrault and Davies suffer cyberattacks compromising client information on confidential M&A deals and litigation files.

What to know

  • Two of Canada's largest corporate law firms—McCarthy Tétrault and Davies—suffered cyberattacks within 24 hours, compromising thousands of files containing sensitive client data on confidential M&A deals and litigation.
  • McCarthy Tétrault lost approximately 31,000 files according to an insider; Davies had one account compromised; other major Bay Street firms confirmed they were unaffected.
  • Both firms store privileged communications and confidential information about major deals not yet announced, raising stakes for clients and potentially affecting market-sensitive transactions.

McCarthy Tétrault LLP Major Canadian corporate law firmDavies Ward Phillips & Vineberg LLP Major Canadian corporate law firmThe Globe and Mail Reporting outlet

Two major Canadian law firms hit by data breaches affecting thousands of files
theglobeandmail.com

How it unfolded 1 development · click the chart to see its coverage articlesposts

Peak 2 pieces in 3h at Oct 29, 2 PM; 3 pieces over 13 days (1 article · 2 posts) Oct 29, 2 PM — 2 pieces · 1 article · 1 post — Google News 1, Mastodon 1Oct 29, 5 PM — quietOct 29, 8 PM — quietOct 29, 11 PM — quietOct 30, 2 AM — quietOct 30, 5 AM — quietOct 30, 8 AM — 1 piece · 1 post — Reddit 1Oct 30, 11 AM — quietOct 30, 2 PM — quietOct 30, 5 PM — quietOct 30, 8 PM — quietOct 30, 11 PM — quietOct 31, 2 AM — quietOct 31, 5 AM — quietOct 31, 8 AM — quietOct 31, 11 AM — quietOct 31, 2 PM — quietOct 31, 5 PM — quietOct 31, 8 PM — quietOct 31, 11 PM — quietNov 1, 1 AM — quietNov 1, 4 AM — quietNov 1, 7 AM — quietNov 1, 10 AM — quietNov 1, 1 PM — quietNov 1, 4 PM — quietNov 1, 7 PM — quietNov 1, 10 PM — quietNov 2, 1 AM — quietNov 2, 4 AM — quietNov 2, 7 AM — quietNov 2, 10 AM — quietNov 2, 1 PM — quietNov 2, 4 PM — quietNov 2, 7 PM — quietNov 2, 10 PM — quietNov 3, 1 AM — quietNov 3, 4 AM — quietNov 3, 7 AM — quietNov 3, 10 AM — quietNov 3, 1 PM — quietNov 3, 4 PM — quietNov 3, 7 PM — quietNov 3, 10 PM — quietNov 4, 1 AM — quietNov 4, 4 AM — quietNov 4, 7 AM — quietNov 4, 10 AM — quietNov 4, 1 PM — quietNov 4, 4 PM — quietNov 4, 7 PM — quietNov 4, 10 PM — quietNov 5, 1 AM — quietNov 5, 4 AM — quietNov 5, 7 AM — quietNov 5, 10 AM — quietNov 5, 1 PM — quietNov 5, 4 PM — quietNov 5, 7 PM — quietNov 5, 10 PM — quietNov 6, 1 AM — quietNov 6, 4 AM — quietNov 6, 7 AM — quietNov 6, 10 AM — quietNov 6, 1 PM — quietNov 6, 4 PM — quietNov 6, 7 PM — quietNov 6, 10 PM — quietNov 7, 1 AM — quietNov 7, 4 AM — quietNov 7, 7 AM — quietNov 7, 10 AM — quietNov 7, 1 PM — quietNov 7, 4 PM — quietNov 7, 7 PM — quietNov 7, 10 PM — quietNov 8, 1 AM — quietNov 8, 4 AM — quietNov 8, 7 AM — quietNov 8, 10 AM — quietNov 8, 1 PM — quietNov 8, 4 PM — quietNov 8, 7 PM — quietNov 8, 10 PM — quietNov 9, 1 AM — quietNov 9, 4 AM — quietNov 9, 7 AM — quietNov 9, 10 AM — quietNov 9, 1 PM — quietNov 9, 4 PM — quietNov 9, 7 PM — quietNov 9, 10 PM — quietYesterday, 1 AM — quietYesterday, 4 AM — quietYesterday, 7 AM — quietYesterday, 10 AM — quietYesterday, 1 PM — quietYesterday, 4 PM — quietYesterday, 7 PM — quietYesterday, 10 PM — quietToday, 1 AM — quietToday, 4 AM — quietToday, 7 AM — quietToday, 10 AM — quietToday, 1 PM — quietToday, 4 PM — quietToday, 7 PM — quiet 1
Oct 30Oct 31Nov 1Nov 2Nov 3Nov 4Nov 5Nov 6Nov 7Nov 8Nov 9yesterdaynow · 9:14 PM ET
  1. 1

    Globe and Mail reports breaches affected 31,000 files at McCarthy Tétrault

    The Globe and Mail breaks the story of the two law firm breaches, reporting that McCarthy Tétrault had 31,000 files stolen according to a source directly involved, though the firm declined to confirm the number. Six other major Bay Street law firms confirmed they were not affected.

    “The investigation has since identified that an unauthorized third party gained access to certain files, including information relating to clients.”
    — McCarthy Tétrault, Law firm statement · source
    1. first by The Globe and Mail, 13d ago

    • Corporate law firm McCarthy Tétrault hit by data breach https://www. theglobeandmail.com/business/a rticle-corporate-law-firm-mccarthy-tetrault-hit-by-major-data-breach/?utm_source=flipboard&utm_medium=activitypub Posted into Business @ business-globeandmail

      globeandmail@flipboard.comMastodon13d agoview on Mastodon ↗
  2. background

    Both firms engage cybersecurity experts and notify clients — McCarthy Tétrault and Davies worked with cybersecurity firms to determine the extent of the breaches and began reaching out to clients throughout the week to inform them of the compromised data.

  3. background

    Davies experiences cyberattack — Davies Ward Phillips & Vineberg LLP suffered a cyberattack on October 23 that resulted in compromise of information from one account.

  4. background

    McCarthy Tétrault detects data breach — McCarthy Tétrault caught an unauthorized breach late on October 22, discovering that a third party had gained access to certain client files.