McCarthy Tétrault Reports Major Cybersecurity Breach
The firm identified that 31,000 files were accessed during a recent co-ordinated social engineering campaign.
Updated on Oct. 29, 2026 in Cybersecurity
Live Poll
Do you trust that professional firms are doing enough to keep your personal data secure?
McCarthy Tétrault discovered a cybersecurity breach and social engineering campaign on October 22, 2026. Approximately 31,000 files were stolen from the firm during the incident.
Why it matters
The breach highlights the growing sophistication of social engineering attacks that target legal professionals through impersonation. Law firms must now navigate heightened security risks as industry insurers adjust coverage models in response to these emerging threats.
A forensic review confirmed that attackers accessed 31,000 files through a co-ordinated social engineering campaign. No additional breaches were identified beyond the initial unauthorized access.
The players
McCarthy Tétrault
McCarthy Tétrault is a prominent Canadian law firm that provides a wide range of legal services to domestic and international clients.
LawPro
LawPro is an insurance provider that manages professional liability coverage for lawyers practising in Ontario.
The details
Attackers successfully gained access to files by impersonating IT help desk staff to deceive lawyers. The firm has since alerted law enforcement agencies to the activity and initiated contact with affected clients.
Timeline
October 22, 2026: The firm discovered the cybersecurity breach and social engineering campaign.
October 25, 2026: McCarthy Tétrault notified affected clients regarding the data breach.
2027: LawPro plans to increase insurance premiums and provide $1 million in social engineering coverage.
The Tech Race
The incident highlights how law firms are increasingly vulnerable to social engineering as they transition from legacy communication to modern digital workflows. This event forces a direct response in industry insurance standards, effectively redefining how firms calculate risk in the current threat landscape.
Clients of the firm may be contacted regarding their specific data exposure as the investigation continues. Lawyers and staff in the sector should expect stricter internal verification protocols for IT support requests moving forward.
The takeaway
Firms are increasingly vulnerable to human-centric digital attacks that bypass traditional perimeter defenses. Professionals should verify the identity of any internal support contact before sharing credentials or sensitive files.
Further reading
Find more analysis on firm security in our Cybersecurity section.
Source note: This article includes information reported by The Logic.
Live Poll
Do you trust that professional firms are doing enough to keep your personal data secure?
