Gateley suffers loss of client data in cyber-attack


Waldie: Carefully planned for attack

Client data has been stolen from Gateley in a cyber-attack, the listed law firm has revealed.

The firm said it was currently “confident that the incident has been confined to a very small part of its data store, amounting to approximately 0.2% of the company’s data”.

In a statement to the stock exchange, Gateley said the impacted data was “traced quickly and deleted from the location to which it had been downloaded and there is no evidence currently to suggest that this data has been further disseminated”.

It included “some client data” and those clients would be notified when the firm’s investigations “are further progressed”.

Gateley said it has already notified the relevant regulators and law enforcement agencies, as well as the Information Commissioner’s Office.

The “intrusion into its systems from a now known external source” was “quickly” identified by Gateley’s IT team, the statement said.

“Based on the information gathered to date, the company is confident that its security controls were effective in limiting the impact of the incident.

“The company took some of its systems offline while it undertook necessary extensive investigations into the incident, supported by a professional cyber-security support team mobilised as part of its cyber-security insurance facility.

“The company has carefully but rapidly re-established its core systems to enable its staff to continue to work and communicate with its clients. The board has seen no evidence that the financial performance of the company has been impaired.”

Chief executive Rod Waldie said the firm had “carefully planned” for the possibility of a cyber-breach.

“We are continuing to work with specialist cyber security professionals to investigate the incident and identify any parties that may have been affected and we will, of course, contact anyone affected in due course.

“In the meantime, we are restoring all of our systems in a safe and secure manner as quickly as possible and do not expect at this stage any significant disruption to our day-to-day activities or financial performance.”

At the time of writing, Gateley’s shares had dipped 3% on the news.

Law firms are seen as attractive targets by hackers because of the sensitive data they hold.




Blog


Fifteen years on: Lessons from ABS reform

Fifteen years ago this month saw the very first alternative business structure. At the time, the prospect of non-lawyers owning law firms was dubbed ‘Tesco Law’.


Hybrid working and client money controls – be aware of the risks

For legal finance teams, remote working has changed how information moves, how approvals are obtained and how colleagues communicate.


AI can interrogate your contracts – but are they ready for questioning?

Suppose a law firm wants to review a client’s entire real estate portfolio for risk in the leases. Not long ago, that meant a multi-week project. Today, first-pass answer can arrive in minutes.


Loading animation