Langley Twigg Law cyber attack under investigation after data breach

Langley Twigg Law in Napier was hit by a cyber attack affecting internal and client documents. Photo / 123rf

By Ellen O’Dwyer of RNZ

A Napier-based law firm says it’s been hit by a cyber attack affecting internal information about the firm as well as client documents.

Langley Twigg Law said it’s working with digital forensics and cyber specialists over the January 11 attack.

In a statement on its website on January 26, the firm said the specialists’ investigation confirmed a “malicious third-party” attack launched a virus on the firm’s IT network, which was not protected by its cyber security software.

The law firm said the “third-party extracted a portion of the data from our file server, which contained both internal information relating to Langley Twigg’s operations and some client documents”.

It said it’s working to understand exactly what information was leaked, and will then contact affected clients.

“We are working intensively on this process but please understand that this may take some time to work through. We will provide further updates as our investigation progresses.”

The firm says it’s contacted the Office of the Privacy Commissioner and the police.

The police are investigating.

“We are extremely sorry that this has happened,” the firm said.

“We are working hard to identify whose personal information may have been compromised and ensure that those affected receive appropriate notifications.”

The firm said it had taken immediate steps once it was alerted to the attack on January 11, including switching off and disconnecting the IT network from the internet.

“At the time of the attack, we were in the process of moving to a cloud-based document management system; this process will be completed shortly and will reduce the risk of any future incidents.”

It advised clients to “be extra vigilant” and keep an “especially keen eye” on bank account and credit card transactions, as well as to stay alert to suspicious messages.

Langley Twigg law has been approached for further comment, as well as the Office of the Privacy Commissioner.

-RNZ