CrowdStrike: AI Cyberattacks on Law Firms Double, Threatening Legal Sector

• Cyberattacks leveraging agentic artificial intelligence against law firms have doubled since 2023.
• CrowdStrike's 2026 Legal Threat Landscape Report revealed 455 legal entities were targeted by hackers between August 2025 and August 2026.
• This figure marks a 39% increase in targeted legal organizations compared to the prior year.
• Firms such as Quinn Emanuel Urquhart & Sullivan, Wilmer Cutler Pickering Hale and Dorr, and Seyfarth Shaw have recently experienced cyber breaches.
• A CrowdStrike executive warns that agentic technology is democratizing hacking, predicting the situation will deteriorate further.

It’s going to get a lot worse before it gets better.

Cybersecurity experts are sounding the alarm regarding a significant surge in sophisticated digital assaults targeting law firms and other entities within the legal profession. These increasingly prevalent attacks leverage advanced agentic artificial intelligence, marking a new frontier in cyber warfare. A recent analysis, the 2026 Legal Threat Landscape Report from cybersecurity firm CrowdStrike, reveals a stark reality: such AI-powered incursions have doubled in frequency since 2023, presenting an unprecedented challenge to the sector's digital defenses.

The findings from the CrowdStrike report underscore a critical period for law firm cybersecurity risks. The legal industry, a repository of highly sensitive client information and intellectual property, is becoming an ever-more attractive target for malicious actors. The report, released on a Wednesday, highlights the rapid evolution of threat capabilities, driven by the accessibility and power of AI tools now available to cybercriminals.

Between August 2025 and August 2026, a staggering 455 legal organizations were explicitly identified as targets by cyber adversaries, according to the comprehensive CrowdStrike report. This figure represents a substantial 39% increase compared to the preceding year, illustrating the accelerating pace of these digital threats. While CrowdStrike's official publication refrained from naming specific victims, external reporting has shed light on some prominent firms that have recently contended with cyber breaches.

Among the legal powerhouses reportedly affected are Quinn Emanuel Urquhart & Sullivan, Wilmer Cutler Pickering Hale and Dorr, and Seyfarth Shaw. These incidents, as detailed by Reuters, serve as tangible examples of the pervasive nature of the threats outlined in the CrowdStrike report, emphasizing the urgent need for enhanced protective measures against AI cyberattacks targeting law firms. The increasing sophistication means even well-resourced firms are vulnerable.

Adam Meyers, CrowdStrike’s senior vice president for counter adversary operations, offered a sobering perspective on the current trajectory of these threats. He noted that a growing number of malicious actors are harnessing agentic technology, effectively "democratizing hacking" by making advanced tools more accessible. This trend suggests a future where cyber capabilities are no longer exclusive to highly sophisticated state-sponsored groups but are within reach of a broader range of attackers.

Meyers' assessment paints a grim picture for the immediate future of legal cybersecurity, stating unequivocally that "It’s going to get a lot worse before it gets better." This stark warning from the CrowdStrike report on AI cyberattacks affecting law firms signals that the legal sector must prepare for an intensified and more complex threat landscape. The implications extend beyond data loss, encompassing severe reputational damage and significant financial repercussions for firms unable to adequately defend against these evolving AI-fueled assaults.

Law firms and compliance officers must urgently review and strengthen their cybersecurity protocols, particularly against evolving AI-powered threats, to protect sensitive client data and avoid significant reputational and financial repercussions highlighted by the CrowdStrike report.

Source: Original reporting via Reuters.