Law Firm Cyberattacks Nearly Double, Dark Web Risk Rises

Cyberattacks targeting law firms are rising sharply, with BakerHostetler reporting a near-doubling of incidents in 2025. The escalation matters because law firms often hold merger records, litigation files, client communications and other material that can expose companies to regulatory, legal and reputational damage.

Greenberg Traurig said documents were posted to the dark web, highlighting how stolen data can quickly move from intrusion to monetization. For firms that serve banks, asset managers, crypto companies and public corporations, a breach can create downstream risk well beyond the initial compromise.

The pattern also reflects a broader shift in cybercrime. Attackers increasingly target professional services firms as indirect access points to high-value corporate data, rather than attacking end clients first. That makes legal-sector security a growing issue for market participants that rely on outside counsel for sensitive transactions and disputes.

For digital asset firms, the implications are material. Law firms often handle token issuance documents, compliance reviews, custody agreements and enforcement matters. A breach at a legal adviser can expose transaction details, counterparties and strategic plans before they reach the market.

The incident arrives in a market environment that remains risk-tolerant, with the Fear & Greed Index at 56. Even so, cyber events of this kind can quickly alter sentiment around operational resilience, especially when they involve firms that sit close to capital markets and regulated financial infrastructure.