Over 190 Law Firms Affected by Advanced Data Leak That Exposed Over 10,000 Legal Documents

guest · May 19, 2020

Over 190 Law Firms Affected by Advanced Data Leak That Exposed Over 10,000 Legal Documents
May 18, 2020
https://www.cpomagazine.com/cyber-s...leak-that-exposed-over-10000-legal-documents/

A leading UK software company exposed personal information belonging to over 190 law firms through an unsecured online database. TurgenSec security firm discovered the breach but could not immediately identify the owner of the online database and therefore contacted the National Cyber Security Centre (NCSC).

Following the Responsible Disclosure Policy, the firm contacted the affected law firms who confirmed the data leak came from legal documents hosted by Laserform Hub owned by Advanced Computer Software Group Limited.
The database was accessible online to anybody with a browser and internet connection. Advanced claimed the details exposed were largely of public records and resorted not to report the leak.
Click to expand...

Advanced Computer Software Group downplayed the data leak
Justin Young, director of security and compliance at Advanced, said the information revealed in the data leak was of public domain and published by Companies House. He added that some of the fields were blank and the rest contained only the first three letters.

The first three letters are highly discernable, especially when it involves places and names. It could also give hackers hints about the possible names, thus making it easy to perform brute force attacks.
The move to close the database is also proof that the law firms exposed legal documents were not supposed to be public.
Click to expand...

TurgenSec: 193 Law Firms – Advanced Data Breach Disclosure Update

TurgenSec discovered a data breach at a legal software provider affecting over 190 law firms, including three magic circle law firms. We posted our public statement of the matter on the 27th of April. It has come to our attention that the identities of the owner of the database and affected parties are now public knowledge (FT Article).
Click to expand...

Log in or Sign up

Over 190 Law Firms Affected by Advanced Data Leak That Exposed Over 10,000 Legal Documents

guest Guest

Log in or Sign up

Over 190 Law Firms Affected by Advanced Data Leak That Exposed Over 10,000 Legal Documents

guest Guest

Useful Searches