Not only are lawyers and law firms not immune from experiencing cybersecurity incidents but they are also in a distinctive position: Such incidents might subject them to legal.
Department of Justice DOJ recently announced an updated policy directing that good-faith security research not be charged under the federal Computer Fraud and Abuse Act CFAA, furthering clarity on CFAA charging in Van Buren v. United States, 141 S. Ct. 1648