🚨 BREAKING NEWS! Microsoft Outlook Outage: What Lawyers Need to Do When Microsoft 365 Email Fails ⚠️

lawyers are you prepared if your e-mail server goes down?!

The Microsoft Outlook and Exchange Online outage reported on August 31 is a timely warning for every law practice that relies on Microsoft 365 for email, calendars, document access, and client communication. This was not simply an inconvenience. For lawyers, a cloud-service disruption can become a deadline, confidentiality, supervision, and client-service problem within hours. ⚖️

Thousands of users reported Outlook problems beginning shortly before noon Eastern Time on August 31. Reports peaked at nearly 6,000 shortly after 12:24 p.m. ET. The most common complaint involved receiving email. Users also reported login and app-access problems. Microsoft initially confirmed degraded functionality in Exchange Online, its cloud-hosted email platform.

The situation later appeared broader than Outlook alone. Reporting on Microsoft’s service updates indicated that the incident affected Exchange Online and could affect Microsoft 365 services including OneDrive for Business, SharePoint Online, Teams, Purview, and Defender XDR. Microsoft attributed the incident to a core authentication-configuration issue. By early September 1, mailbox connectivity had reportedly been restored, although Microsoft was still addressing search functionality and the clearing of backlogged mail queues.

For a law firm, that combination matters. An outage can interrupt email. A related Microsoft 365 disruption can also interfere with matter files, calendar access, Teams meetings, e-discovery workflows, secure sharing, retention tools, and even the ability to authenticate into the firm’s normal systems.

The lesson is not that lawyers should abandon cloud technology. Microsoft 365 remains an important platform for many legal organizations. The lesson is that every firm needs a practical, tested continuity plan for the days when a trusted vendor’s systems are unavailable. 🔐

Why This Is a Legal-Practice Issue

Lawyers often treat email as an everyday administrative tool. Clients do not. To a client, email is often the firm’s front door, the place where urgent instructions arrive, and the record of whether counsel responded when it mattered.

When Outlook or Exchange Online stops working, several risks arise at once:

• A client may send time-sensitive instructions that do not reach the firm promptly.

• Opposing counsel may serve a filing, discovery response, settlement demand, or meet-and-confer request by email.

• A court may issue a notice, hearing link, electronic filing notice, or order through a system that the lawyer normally monitors through Outlook.

• Firm staff may be unable to locate calendar invitations or Teams links for hearings, mediations, depositions, and client meetings.

• Messages sent during the outage may be delayed. They may arrive later in a batch, which can create confusion about when the message was actually sent or received.

• Lawyers may resort to personal email, text messages, or improvised file-sharing tools without considering confidentiality, security, and retention obligations.

That is why a service outage is not merely an IT ticket. It is a business-continuity event. A solo lawyer can face the same core risk as a large firm, although a solo lawyer may have fewer people available to spot the problem and activate a fallback process.

The ABA Model Rules provide the framework. ABA Model Rule 1.1 requires competent representation. Comment 8 explains that competence includes keeping abreast of the benefits and risks associated with relevant technology. A lawyer who depends on cloud email does not need to become a Microsoft systems engineer. The lawyer does need to understand the operational risks of that dependency and make reasonable preparations for an outage.

That obligation is especially practical in 2026. Technology competence includes knowing where the firm will look for alerts, who decides that an outage is material, how the firm will communicate with clients, and how the firm will protect confidential information when normal workflows fail.

🚨The Ethics During an Outage ⚖️

lawyers need a firm-wide policy whnen their e-mail server goes down.

An outage does not suspend professional duties. It changes the way a lawyer must satisfy them.

Competence: ABA Model Rule 1.1

Model Rule 1.1 calls for the legal knowledge, skill, thoroughness, and preparation reasonably necessary for the representation. Comment 8 adds the technology dimension. A firm should have a basic plan for interrupted email and cloud access. That is preparation, not overengineering.

A reasonable plan may include:

• A designated person to monitor the Microsoft 365 Service Health Dashboard and vendor-status notices.

• A current list of urgent matters, upcoming deadlines, hearings, and client contacts.

• An alternative communication channel approved by the firm.

• Instructions for capturing and documenting communications received through a fallback channel.

• A process for reconciling delayed or queued email after service is restored.

• A clear escalation path for lawyers and staff when an outage affects a deadline-sensitive matter.

The plan should match the firm’s size, practice areas, client base, and risk profile. A litigation practice with frequent electronic filing deadlines has different needs from a transactional practice, although neither can assume that email will always work.

Confidentiality: ABA Model Rule 1.6

Model Rule 1.6 requires lawyers to "make reasonable efforts" to protect information relating to client representation. Paragraph (c) specifically requires reasonable efforts to prevent inadvertent or unauthorized disclosure of, or unauthorized access to, that information.

That duty is particularly important when normal systems are down. An Outlook outage creates pressure. Pressure can lead someone to forward client documents to a personal Gmail account, upload a file to an unsanctioned consumer platform, or conduct substantive client business by unprotected text message.

Those choices may create more risk than the outage itself.

The better approach is to decide now which alternatives the firm permits. For example, the firm might maintain an approved secondary secure email platform, a secure client portal, or an encrypted communication tool. It should also decide how those communications will be preserved in the client file once Microsoft 365 services return.

Do not let individual lawyers invent their own workaround in the middle of a disruption. That is not a criticism of ingenuity. It is a recognition that confidentiality, security, and recordkeeping require a coordinated response. 🔒

Diligence and Communication: ABA Model Rules 1.3 and 1.4

Model Rule 1.3 requires diligence. Model Rule 1.4 requires reasonable communication with clients. An outage can affect both.

If a client’s matter has a filing deadline, hearing, closing, or urgent negotiation, the firm should actively determine whether a disruption is affecting communications or access to essential documents. A lawyer should not assume that the absence of incoming email means that no message has been sent.

Likewise, if an outage materially affects the firm’s ability to receive or send client communications, a short client notice can be appropriate:

“We are experiencing a temporary interruption affecting our primary email service. If your matter is urgent or deadline-sensitive, please contact our office by telephone at [number] or use our secure client portal at [link]. We will respond as soon as possible.”

— Potential Message for Your Law Firm When E-mail is Down...

That message is concise, useful, and professional. It informs the client without disclosing unnecessary details about the firm’s systems or creating undue alarm.

Supervision: ABA Model Rules 5.1 and 5.3

Partners and lawyers with managerial authority must make reasonable efforts to ensure that the firm has measures giving reasonable assurance that all lawyers conform to professional obligations. Lawyers who supervise nonlawyer staff have a related duty. An email-outage protocol is one of those measures.  See generally Rules 5.1 and 5.3.

Staff members need to know:

• Which matters require immediate escalation.

• Which phone numbers, portals, or backup channels are authorized.

• Whether they may use personal devices or personal accounts for firm communications.

• How to record calls, messages, and documents received outside normal systems.

• Who is authorized to communicate externally about the incident.

A simple one-page playbook can prevent a great deal of uncertainty. 📋

What To Do Today

don’t be caught unprepared if your e-mail server goes down!

The August 31 Microsoft 365 incident should prompt a short, focused review. You do not need a 75-page disaster-recovery manual before taking useful action.

1. Confirm the Scope Before You Improvise

When Outlook appears to fail, first determine whether the problem is local or broader:

• Check Microsoft 365 Service Health through the Microsoft 365 admin center.

• Check whether Outlook on the web works if the desktop application does not.

• Test access from a different network or device.

• Confirm whether the problem is limited to one user, one office, the firm’s domain, or a larger Microsoft service event.

• Check reputable outage reporting only as a supplemental source. Crowdsourced reports can signal a problem, but they do not replace the vendor’s tenant-specific status information.

During the August 31 disruption, Microsoft identified effects that included email delays or failures, mailbox-search issues, authentication errors, and trouble with Exchange administration and mailbox operations.

That distinction matters. A lawyer may be able to open Outlook but still experience delayed mail flow or incomplete search results. “It seems to be working again” is not the same as “all messages and matter records are available and current.”

2. Protect Deadlines First

Create a brief list of matters with time-sensitive events in the next 24 to 72 hours:

• Court filing deadlines.

• Administrative filing deadlines.

• Statutes of limitation or notice deadlines.

• Depositions, mediations, arbitrations, and hearings.

• Closings and settlement deadlines.

• Client commitments requiring same-day action.

Then verify communications through an approved backup method. If electronic filing is involved, review the court’s rules, emergency procedures, and clerk’s office notices. A Microsoft outage does not automatically extend a filing deadline. The relevant court rule, filing system status, and the particular judge’s procedures control.

Document what happened. Note the date, time, service involved, affected matter, communications attempted, and action taken. That contemporaneous record can be essential if a deadline issue later needs explanation.

3. Use Approved Backup Channels

A good backup channel is secure, accessible, documented, and familiar to the client and the firm. It might include:

• A secure client portal.

• A firm-approved encrypted email solution.

• The firm’s phone system and a documented telephone-call protocol.

• A secure collaboration system that remains available.

• A secondary, firm-controlled domain or mailbox that has been vetted in advance.

The right answer is not necessarily “use text messages.” Texting may be useful for a limited logistical notice, such as asking a client to call the office. It may be unsuitable for substantive communications or transmission of client documents unless the firm has assessed the platform, the client’s consent, security controls, retention, and applicable state ethics guidance.

4. Reconcile Email After Recovery

Once Microsoft reports recovery, do not assume the episode is over. Microsoft warned that mail queues might take time to clear and that search could remain affected.

The firm should:

• Review incoming and outgoing email around the outage window.

• Confirm receipt of all time-sensitive communications.

• Check Sent Items, drafts, outbox folders, and message-tracking tools where available.

• Re-run critical mailbox searches when search functionality is confirmed restored.

• Ask clients or opposing counsel to resend urgent communications if delivery status remains uncertain.

• Save an internal incident note for affected matters.

This is particularly important for e-filing notices, service emails, and client instructions. A delayed message can cause a lawyer to act on incomplete information.

5. Preserve the Lesson

After the immediate problem ends, conduct a short post-incident review. Keep it practical:

• What did not work?

• Which staff members knew how to respond?

• Were clients able to reach the firm?

• Did the firm have access to critical contact information?

• Did anyone use an unapproved tool because no approved alternative was clear?

• How long would the firm have remained operational if the outage had lasted another day?

The goal is not to assign blame. The goal is to reduce the risk of disruption next time. 💡

AI Tools Need Continuity Too

lawyers, meet your ethical compliance, be prepared for the unexpected, and come out the superstar to your clients!

The August 31 event also included reported disruption to ChatGPT. USA TODAY reported that ChatGPT functionality was restored while Outlook issues remained ongoing. For AI-curious lawyers, that overlap underscores a broader point: no cloud-based tool should become a single point of failure in a legal workflow.

Generative AI can assist with drafting, issue-spotting, summarization, and internal knowledge work. It should not be the only route to a critical work product. Keep source documents accessible. Preserve the lawyer’s independent judgment. Maintain a non-AI process for urgent drafting and legal research.

That approach aligns with the central lesson from our profession’s ongoing technology-competence discussion: the appropriate question is not whether a tool is innovative. The better question is whether the firm understands its benefits, limitations, confidentiality implications, and continuity risks. Rule 1.1 Comment 8 expressly frames technological competence in terms of both benefits and risks.

A practical rule of thumb: if the platform is unavailable for four hours, can your firm still identify the deadline, reach the client, access the critical document, and make a defensible decision? If the answer is no, that workflow needs attention.

The Bottom Line

Microsoft’s Outlook and Microsoft 365 disruption is a useful reminder that professional responsibility does not depend on whether a vendor’s status page is green. Lawyers need reliable systems, but they also need workable alternatives when reliable systems fail.

The best response is not panic. It is preparation. Maintain approved backup channels. Train staff. Protect confidential information. Monitor time-sensitive matters. Reconcile communications after recovery. Document what occurred.

For solo and small-firm lawyers, this can be accomplished without enterprise-level complexity. A current contact list, a secure fallback channel, a deadline triage checklist, and a 15-minute staff drill can materially improve the firm’s ability to serve clients when technology takes an unexpected day off. 📧⚖️

🚨 BOLO: Chrome Security Update: Law Firms Should Patch Before Browsing Again 🚨

lawyers keep your work secure, update your softwarE - update your google chrome browser now!

Solo practitioners and small firms should make updating Google Chrome a same-day task. Malwarebytes reports that Chrome’s current desktop update includes 327 security fixes, including 10 critical vulnerabilities, and that certain flaws can be triggered simply by visiting a malicious website. For a law practice handling confidential client communications, privileged work product, and sensitive financial data, that is a risk worth addressing immediately.

Chrome’s stable release has been updated to version 152.0.7977.64/.65 for Windows and Mac, and 152.0.7977.64 for Linux. The update addresses, among other issues, a critical flaw in ANGLE, Chrome’s graphics translation component, identified as CVE-2026-79282. Malwarebytes says a remote attacker could exploit that flaw through a crafted web page to execute arbitrary code outside Chrome’s browser sandbox.

That phrase—“outside the sandbox”—matters. Browser sandboxing is designed to contain web content so that a malicious site cannot easily reach the rest of the computer. A flaw that permits code execution beyond that boundary can give an attacker a path from a single web visit to the underlying operating system. That is precisely the sort of exposure lawyers should avoid when working in a browser alongside client portals, email, cloud document systems, court filing platforms, banking tools, and AI services. ⚖️

The update also remediates CVE-2026-78899, a use-after-free vulnerability in Chrome’s V8 JavaScript engine. It has a reported CVSS score of 8.8 out of 10. Even though successful exploitation occurs inside the browser sandbox, it should not be dismissed. Attackers frequently combine vulnerabilities in a chain, using one weakness to gain an initial foothold and another to widen access.

Why this is a legal-ethics issue!

its a team effort - remind your fellow lawyers to update their chrome browser today!

Technology hygiene is no longer separate from professional responsibility. ABA Model Rule 1.1 requires competent representation, and Comment 8 specifically calls on lawyers to keep abreast of “the benefits and risks associated with relevant technology.” A lawyer does not need to become a cybersecurity engineer. But maintaining a reasonably secure browser—the primary doorway to modern legal work—is a basic and manageable safeguard.

Model Rule 1.6(c) is equally relevant. It requires lawyers to make reasonable efforts to prevent unauthorized access to, or inadvertent disclosure of, client information. An unpatched browser can become an avoidable weak point in that effort. A compromised browser session could expose client documents, credentials, confidential messages, cloud-storage access, or data entered into web forms. 🔐

For firms, this update is also a reminder to think beyond the individual lawyer’s device. Rule 5.1 requires partners and managers to make reasonable efforts to ensure that firm-wide practices conform to professional obligations. Rule 5.3 similarly requires appropriate oversight of nonlawyer assistants. In practical terms, that means someone should own the checklist: browser updates, operating-system patches, password-manager deployment, multifactor authentication, and employee awareness.

Update Chrome now

On a Windows or Mac computer:

1. Open Chrome.

2. Select the three-dot More menu in the upper-right corner.

3. Choose Settings.

4. Select About Chrome.

5. Allow Chrome to download any available update.

6. Restart the browser to complete installation. 🔄

Chrome typically updates itself, but automatic updates can lag when the browser remains open for days, a restart is postponed, or an extension interferes with the update process. Malwarebytes specifically notes that manually checking can ensure the update is applied rather than merely downloaded.

This is a two-minute task with a potentially significant payoff. Before opening that unfamiliar link, reviewing a shared file, or logging into a client-facing platform, take a moment to confirm that Chrome is current. Security is not a one-time purchase or a single policy document. It is a set of small, repeatable habits that protect the practice and the people who trust it.

Bottom line: update Chrome, restart it, and encourage everyone in your firm to do the same today. ✅

BOLO: Rokarolla Android Banking Malware Is Hunting Lawyers’ Phones—and Your Trust Accounts

A Tech-savvy lawyer needs to shield client banking data from Android malware attack.

If you use an Android phone for client communications or online banking, it’s time to treat Rokarolla as a real and present danger—not as abstract “security news.” 🚨 This newly uncovered Android malware can silently take over your device, steal your banking logins, and hijack your screen to trick you into handing it the keys to your operating and trust accounts.

Rokarolla is a banking Trojan that abuses Android’s accessibility services and screen overlay capabilities to place fake login pages on top of your legitimate banking apps. The malware is distributed mainly through malicious websites that push users to download “free” or “updated” apps outside the Google Play Store—classic sideloading traps. Once on your phone, Rokarolla can read what’s on your screen, simulate taps, and siphon off your credentials, all while you think you’re securely logging in.

For solo and small‑firm lawyers who often use one device for everything—email, texting, banking, client portals—the risk is amplified. If Rokarolla compromises the phone you use for trust-account access or client billing, your exposure isn’t just financial. It’s ethical. Under ABA Model Rule 1.1, competence today includes understanding the “benefits and risks associated with relevant technology.” Failing to take basic steps to prevent a known mobile banking threat can be viewed as a failure to exercise reasonable competence in safeguarding client property and information.

Rokarolla’s core move is deceptively simple. After infection, it requests broad accessibility permissions. If granted, it can:

Solo attorney need to confront malicious Android apps threatening law firm finances.

• Observe what appears on your screen, including banking and financial apps.

• Capture input events such as taps, swipes, and text entry.

• Draw fake overlays that look like your bank’s login page, convincing you to “re‑authenticate.”

When you type your username, password, or two‑factor codes into this fake screen, Rokarolla sends that data back to its operators, who can then access your real accounts. For a law firm, that could mean unauthorized wire transfers from your trust account, tampering with payroll, or manipulating client refunds—exactly the sort of nightmare that triggers ethics complaints and malpractice claims. 😬

Under ABA Model Rule 1.6, you have an affirmative duty to protect client confidentiality. Client financial data, settlement funds, and trust balances accessed via mobile banking apps fall squarely within that obligation. Using an Android device that you know—or should know—is vulnerable to current banking malware without implementing countermeasures may be viewed as a failure to “make reasonable efforts” to prevent unauthorized access. Integrating mobile security into your practice isn’t optional risk management. It’s part of your professional duty of care.

So what should you do—today—to stay ahead of Rokarolla and similar Android banking Trojans?

1. Stop sideloading apps. Only install apps from the Google Play Store and avoid downloading Android Package Kits from websites, emails, or messaging apps, no matter how “official” they look.

2. Scrutinize permissions. When any app asks for accessibility or overlay permissions (for example, “display over other apps”), treat that as a red flag unless you fully understand why it’s needed.

3. Use a reputable mobile security app. Tools like Malwarebytes for Android can detect and remove many known banking Trojans, including emerging families similar to Rokarolla.

4. Enable strong multi‑factor authentication (MFA). Use app‑based authenticators instead of SMS codes when possible, and never share MFA codes with anyone who contacts you “from the bank.”

5. Segregate devices for sensitive banking. Consider using a dedicated, locked‑down phone or tablet for trust‑account access and keep that device free of social media, gaming, and experimental apps.

6. Train your team. Under ABA Model Rule 5.1 and 5.3, supervising attorneys must ensure that staff and nonlawyer assistants follow security policies. Make Android banking security part of your standard onboarding and training.

Law firm teams need to review Android security checklist to protect trust accounts.

These steps are not extreme. They are the mobile equivalent of locking your office door and using a shredder. They also help you satisfy your duty of reasonable cybersecurity under ethics opinions like ABA Formal Opinion 477R, which emphasizes the need to match your security practices to the sensitivity of client information. When the stakes involve trust accounts, settlement funds, or client escrow, anything less than actively defending your mobile banking environment is inadequate.

The bottom line: treat your Android device as a first‑class part of your practice infrastructure. Rokarolla and its cousins are designed to exploit lawyers who assume their phones are “personal” and therefore outside the security conversation. As a tech‑savvy lawyer, you know better. Your ethics obligations follow your data wherever it goes—including into your pocket.

Stay Safe Out There!

🚨 AWS Outage Resolved: Critical Ethics Guidance for Lawyers Using Cloud-Based Legal Services

Legal professionals don’t react but act when your online legal systems are down!

Amazon Web Services experienced a major outage on October 20, 2025, disrupting legal practice management platforms like Clio, MyCase, PracticePanther, LEAP, and Lawcus. The Domain Name Service (DNS) resolution failure in AWS's US-EAST-1 region was fully mitigated by 6:35 AM EDT after approximately three hours. BUT THIS DOES NOT MEAN THEY HAVE RESOLVED ALL OF THE BACK ISSUES THAT ORIGINATED DUE TO THE OUTAGE at the time of this posting.  Note: DNS - the internet's phone book that translates human-readable web addresses into the numerical IP addresses that computers actually use. When DNS fails, it's like having all the street signs disappear at once. Your destination still exists, but there's no way to find it.

Try clearing your browser’s cache - that may help resolve some of the issues.

‼️ TIP! ‼️

Try clearing your browser’s cache - that may help resolve some of the issues. ‼️ TIP! ‼️

Legal professionals, what are your protocols when your online legal services are down?!

Lawyers using cloud-dependent legal services must review their ethical obligations under ABA Model Rules 1.1 and comment [8] (technological competence), 1.6 (confidentiality), and 5.3 (supervision of third-party vendors). Key steps include: documenting the incident's impact on client matters (if any), assessing whether material client information was compromised, notifying affected current clients if data breach occurred, reviewing business continuity plans, and conducting due diligence on cloud providers' disaster recovery protocols. Law firms should verify their vendors maintain redundant backup systems, SSAE16 audited data centers, and clear data ownership policies. The outage highlights the critical need for lawyers to understand their cloud infrastructure dependencies and maintain contingency plans for service disruptions.

🚨 Breaking News! Federal Courts Implement Enhanced Security Measures for Sealed Documents Following Sophisticated Nation-State Cyberattacks! What Lawyers Must Know Now!!!

Federal courts have launched sweeping new protocols restricting electronic access to sealed documents after a widespread cyberattack linked to Russian actors exposed critical vulnerabilities in the federal judiciary’s decades-old digital infrastructure. As previously reported here, the breach compromised highly confidential information—such as sealed indictments and informant data—across numerous districts, prompting courts to eliminate electronic viewing of sealed filings and require paper-only procedures for sensitive court documents.

what do lawyers need to do as Federal courts respond to cyber attacks?

Why is this happening?
Nation-state cyber threats and outdated systems left federal courts open to attack, as repeatedly warned by The Tech-Savvy Lawyer.Page. The blog has consistently flagged the risks associated with aging technology, weak authentication, and the need for law firms to adopt advanced cybersecurity practices. The recent breach brings these warnings to life, forcing immediate changes for all legal professionals.

What lawyers must do:
Attorneys must now file sealed documents according to new court protocols—usually paper filings—and cannot access them electronically. This transformation demands lawyers take proactive steps to secure confidential information at all times, in line with ABA Model Rule 1.6. Practitioners should review The Tech-Savvy Lawyer.Page for practical tips on ethical compliance and digital preparedness, such as those featured in its “go bag” guide for legal professionals.

Most importantly, consult your local federal court’s website or clerk for the latest procedures, as requirements may vary by district. Safeguarding client confidentiality remains central to legal ethics—stay vigilant, stay informed, and stay tech-savvy.

Breaking News: Trump Pauses Tariffs, Exempts China Electronics—Relief for Legal Tech Costs ⚖️💻

President Donald Trump has announced a 90-day suspension of his controversial tariffs and excluded key electronics—including laptops, smartphones, tablets, and phones—from Chinese imports. This decision offers temporary relief to legal professionals who rely on these tools for daily operations. The move directly impacts the concerns raised in my recent editorial, "The Impact of Trump's Tariffs on Legal Technology Costs: A Strategic Assessment," which highlighted the financial strain tariffs were imposing on law firms.

Immediate Implications for Legal Professionals
The exemption of Chinese electronics from tariffs underlines a significant shift in trade policy. Previously, as detailed in The Tech Savvy Lawyer’s editorial analysis, tariffs were driving up costs on essential legal technology by as much as 54% for Chinese-made goods. This temporary pause provides a critical window for law firms to strategize technology investments without facing imminent price hikes.

Legal professionals should seize this opportunity to upgrade aging hardware or stockpile essential devices while prices remain stable. My editorial emphasized the importance of extending the lifecycle of existing technology—a strategy that remains prudent given the uncertainty surrounding future tariff policies.

Strategic Considerations Moving Forward

Tariff Pause = Time to Upgrade?

While this pause offers short-term relief, it is not a permanent solution. Experts have warned that tariffs could return with sector-specific focus, particularly targeting semiconductors and other critical components. Law firms must remain vigilant and adopt a calculated approach to technology procurement. As suggested in the editorial, practices should prioritize critical upgrades while monitoring policy developments closely.

Additionally, firms relying heavily on data-intensive workflows may want to act now to secure high-performance devices before potential cost increases resurface. For those with lighter technology needs, maintaining current equipment through proper upkeep remains a viable strategy.

What’s Next?
Trump’s decision to exempt Chinese electronics aligns with broader concerns about inflationary pressures and global supply chain disruptions. However, Commerce Secretary Howard Lutnick has hinted at possible future tariffs targeting other sectors. Legal professionals should continue following updates from trusted sources like The Tech Savvy Lawyer to stay informed and prepared for any changes that could impact their practice's operational costs.

For more insights into this developing story, revisit the original editorial on The Tech Savvy Lawyer’s blog:"The Impact of Trump's Tariffs on Legal Technology Costs: A Strategic Assessment."

BREAKING NEWS: Window's Users Including Lawyers Are Globally Impacted Today!

The Impact to MS Windows is NOT a Cyberattack or Virus!

🚨

The Impact to MS Windows is NOT a Cyberattack or Virus! 🚨

Lawyers who use ms windows need to check and make sure their computers are working ok!

Recent updates by CloudStrike have caused disruptions in Microsoft Windows globally, affecting many IT infrastructures.

This has impacted airlines, hospitals, transportation infrastructure and could include law firms and court operations! This may be one of the few times that updating your (Windows) operating system is not a good idea.

This highlights the importance of robust cybersecurity measures and the need for legal professionals to stay informed. Ensure your firm's IT team is aware of the latest updates and potential vulnerabilities - if you are a solo or small firm using Windows, you need to make sure your office systems are ok. Staying proactive can mitigate risks and safeguard client data.

Stay tuned to The Tech-Savvy Lawyer.Page as this story develops!

Breaking News: Some International Internet Traffic May Be Down Due to Cable Cut!

Hong Kong Telecoms Company HGC Global Communications estimates that 25% of traffic between Asia and Europe as well the Middle East has been impacted!

🛜

Hong Kong Telecoms Company HGC Global Communications estimates that 25% of traffic between Asia and Europe as well the Middle East has been impacted! 🛜

lawyers reacting to potential internet disruptions!

CNN reports that submarine cables in the Red Sea, crucial for telecommunications between Asia, Europe, and the Middle East, have been damaged, causing significant disruptions. Four major telecom networks are affected, with an estimated 25% of traffic being rerouted to minimize customer impact. The cause and perpetrators of the damage remain unidentified, amidst speculations involving Houthi rebels and military activities by the UK and US. This incident highlights the vulnerability of the undersea infrastructure that underpins global internet connectivity, reminiscent of past disruptions like the 2006 Taiwan earthquake. Among the impacted networks are the Asia-Africa-Europe and the Europe India Gateway, both vital for international telecommunications.

So if you feel your internet is a little wonky today, you may not be wrong!

BREAKING NEWS! Protecting Your Law Practice: FBI Chief Cautions Congress Against Impending Chinese Cyberattacks.

FBI Director Christopher Wray TESTIFYING before the House China Committee.

On January 31, 2024, FBI Director Christopher Wray testified before the House China Committee. He warned about an ongoing Chinese hacking threat against the United States' crucial infrastructure, including water treatment, energy, transportation, and communications. In an era where cyber threats are becoming increasingly sophisticated and pervasive, the legal profession has become a prime target for malicious actors seeking to gain unauthorized access to sensitive information. Lawyers should take note as the Federal Bureau of Investigation (FBI) has been sounding the alarm on the growing concern of Chinese cyberattacks specifically targeting law firms.

The motives behind these cyberattacks are multi-fold. China's government-backed hackers often seek strategic advantages by acquiring insights into pending litigation or business deals involving American companies. By gaining access to confidential attorney-client communications or negotiating strategies, they can undermine negotiations or influence outcomes in favor of Chinese entities. Furthermore, the stolen intellectual property can be leveraged by Chinese corporations to be used as a blueprint for developing competitive products without incurring research and development costs. This unfair advantage undermines American businesses' ability to compete fairly in global markets and jeopardizes industries vital for national economic growth.

You might believe that your firm is safe from hacking by foreign governments because of its size or the specific legal field you specialize in. However, if any of your clients are targets of interest to hackers, your firm's data could also be at risk.

In order to safeguard your practice and client data, it is essential to adhere to key recommendations provided by the FBI:

Government sponsored cyber attacks can target even the smallest law firm!

• Enhance Cybersecurity Infrastructure: Strengthening your practice's cybersecurity infrastructure should be a top priority. Implement multi-factor authentication for all devices and systems accessing sensitive information. Regularly update software programs, operating systems, and antivirus solutions to ensure they are equipped with the latest security patches. Additionally, consider employing a robust firewall and intrusion detection system to monitor network traffic and identify potential threats.

• Conduct Regular Security Assessments: Perform periodic security assessments of your practice's IT infrastructure to identify vulnerabilities or weaknesses that could be exploited by cybercriminals. Engage reputable cybersecurity firms or consultants who specialize in conducting comprehensive assessments of networks, applications, and databases. These assessments will help you identify potential entry points for hackers and develop strategies to mitigate risks effectively.

• Invest in Employee Training: The human element remains one of the weakest links in any organization's cybersecurity defense system. Train your staff on best practices for identifying phishing attempts, recognizing suspicious emails or attachments, using strong passwords, and practicing safe browsing habits online. By raising awareness among employees about potential cyber threats and providing them with the necessary knowledge to respond appropriately, you can significantly reduce the risk of successful attacks.

EMployee training can be one of your first lines of defense against cyber attacks!

• Implement Data Encryption Measures: Encrypting sensitive data is an effective way to protect it from unauthorized access during transmission or storage. Utilize encryption tools across all communication channels within your practice – including email correspondence – as well as when storing files on local or cloud-based servers. Encryption ensures that even if cybercriminals gain access to your data, it remains unreadable and unusable to them.

• Regularly Back Up Data: Implement a robust data backup strategy to ensure you can recover critical information in the event of a cyberattack or system failure. Regularly back up all client files, case documents, and other important data to an off-site location or cloud-based service. Test the restoration process periodically to verify the integrity of your backups and guarantee their availability when needed.

• Establish an Incident Response Plan: Prepare for potential cyber incidents by developing a comprehensive incident response plan. This plan should outline the steps your practice will take in the event of a breach, including who should be notified, which authorities should be contacted, and how affected clients should be informed. By having a well-defined response plan in place, you can minimize damage and ensure timely action during high-stress situations.

The warning issued by FBI Director Christopher Wray underscores the urgency for legal practitioners to fortify their practices against these malicious actors. By prioritizing cybersecurity measures, fostering a culture of awareness, and collaborating with law enforcement agencies like the FBI, lawyers can better protect themselves and their client's interests and uphold the integrity of the legal profession in an increasingly digital world.