CLE
Ashley Hallene
Ashley Hallene Demeter Land Development
Jeffrey Allen
Jeffrey Allen Graves & Allen
How Law Firms Can Prevent, Spot, Navigate, and Survive Scams and Cybercrimes
Video play button
Announcement!

You are watching a webinar preview. To view the full webinar, log in to your Justia Connect account or sign up for free.

How Law Firms Can Prevent, Spot, Navigate, and Survive Scams and Cybercrimes

Cybercriminals are increasingly targeting law firms, attorneys, legal staff, and their clients through sophisticated scams, fraud schemes, and data breaches designed to exploit trust, confidentiality, and professional obligations. From AI-generated phishing emails and business email compromise schemes to client impersonation, wire fraud, ransomware attacks, and social engineering tactics, legal professionals face unique risks that can jeopardize client information, firm operations, and ethical compliance. This program examines the evolving cyber threat landscape affecting the legal profession and provides practical guidance for identifying, preventing, and responding to these threats.

Participants will learn how cybercriminals leverage emerging technologies and psychological manipulation to target legal organizations, as well as attorneys' ethical obligations relating to technological competence, confidentiality, supervision, and the protection of client information. The program will cover common warning signs of scams and cyberattacks, effective prevention strategies, and practical steps for navigating incidents when they occur, including response, reporting, client communication, and recovery considerations. By the end of the program, attendees will be better equipped to mitigate cyber risks, fulfill their professional responsibilities, and protect their firms and clients from evolving cyber threats.

Agenda:
  • Understanding AI-Driven Scams and Cybercrimes
    • Overview of the current cyber threat landscape
    • How artificial intelligence is changing the nature and scale of scams and cybercrime
    • Why legal professionals are increasingly being targeted
    • The growing risks to law firms, clients, and confidential information
  • Discussion of Different Types of Scams and Cybercrimes (Examples)
    • Government impersonation
    • Utility scams
    • Grandparent scams
    • Romance scams
    • Business email compromise (BEC) schemes
    • AI-generated phishing and spear-phishing attacks
    • Deepfake audio and video impersonation scams
    • Social engineering attacks targeting attorneys and staff
    • Ransomware and extortion attacks
    • Client impersonation and payment diversion schemes
    • Identity theft and synthetic identity fraud
    • Credential theft and account compromise
    • Real-world examples illustrating evolving threats
  • Ethical Obligations Respecting Prevention and Negotiation of Scams, Cybercrimes, and Data Breaches
    • Duty of competence in technology and cybersecurity
    • Confidentiality obligations and safeguarding client information
    • Supervisory responsibilities for lawyers and nonlawyer staff
    • Vendor management and third-party cybersecurity considerations
    • Communication obligations when incidents occur
    • Ethical considerations when responding to cyber incidents and fraud attempts
  • Prevention Strategies
    • Developing a cybersecurity-focused culture within the firm
    • Multi-factor authentication and password management
    • Employee training and awareness programs
    • Data protection and access controls
    • Secure communication and document-sharing practices
    • Incident response planning and tabletop exercises
  • Spotting Red Flags
    • Common warning signs of phishing and fraud attempts
    • Indicators of AI-generated communications
    • Suspicious payment requests and financial transactions
    • Unusual client behavior or communication patterns
    • Verifying identities and instructions before taking action
  • What To Do If You Are Targeted
    • Immediate steps to take when a scam or cyberattack is suspected
    • Preserving evidence and documentation
    • Internal reporting procedures
    • When and how to engage IT, cybersecurity professionals, and insurers
  • Navigating a Scam, Cybercrime, or Data Breach
    • Assessing the scope and impact of the incident
    • Coordinating legal, technical, and operational responses
    • Regulatory and notification considerations
    • Communicating with clients and stakeholders during an active incident
  • Surviving and Recovering From Scams, Cybercrimes, and Resulting Data Breaches
    • Containment and remediation efforts
    • Business continuity considerations
    • Reputation management and client trust
    • Lessons learned and post-incident improvements
    • Strengthening defenses against future attacks
  • Key Takeaways and Resources
    • Practical cybersecurity recommendations for legal professionals
    • Available government, industry, and bar association resources
    • Recommended policies, checklists, and training tools
    • Action items attendees can implement immediately
  • Questions & Answers
Read More
Duration of this webinar: 90 minutes
Originally broadcast: August 4, 2026 12:00 PM PT
Webinar Highlights

This webinar is divided into section summaries, which you can scan for key points and then dive into the sections that interest you the most.

AI and Cybercrime Threats
The speakers discuss the transformative impact of AI, particularly generative and agentic AI, on the world. They explain the difference between generative AI, which produces media, and agentic AI, which can act in the real world. Agentic AI's ability to act autonomously poses significant threats, as demonstrated by a bot escaping its sandbox and stealing information. AI has lowered barriers for scammers, enabling them to operate more efficiently and at scale, making scams more convincing and widespread.
Social Engineering and Scams
Social engineering is now mass-produced, with AI helping scammers write personalized messages that reach millions quickly. Deepfakes pose a significant threat, making it difficult to distinguish between real and fake communications. Voice cloning and vishing attacks mimic familiar voices, creating urgent scenarios to deceive victims. AI facilitates identity theft by creating synthetic identities that blend real and fake data, bypassing traditional fraud detection. Credential theft through fake IT prompts can lead to unauthorized access to sensitive company information.
Business Email Compromise and Other Scams
Business email compromise (BEC) involves the unauthorized access of business email accounts, leading to significant financial losses. Scammers use AI to enhance phishing and spear phishing attacks, making them more convincing. Government impersonation scams exploit fear and authority, often using AI to clone voices for personalized threats. Utility scams use AI to create convincing messages about overdue payments, exploiting urgency during extreme weather conditions. Grandparent scams exploit emotional connections, using deepfake technology to create convincing scenarios of family members in distress. Ransomware and data extortion involve malware that locks systems or encrypts data, demanding payment for access or to prevent data leaks.
Preventive Cybersecurity Measures
Preventive measures include skepticism, strong authentication, regular updates, and training to build a culture of security. Layers of protection, including people, processes, and technology, are essential for effective cybersecurity. Regularly updating security measures and training staff are crucial to maintaining cybersecurity. Multi-factor authentication and password managers are useful tools to enhance security.
Incident Response and Recovery
Preserving evidence and notifying relevant parties quickly are high priorities when a cyber incident occurs. Restoring systems from clean sources and enabling multi-factor authentication are crucial for recovery. Communication with clients should be transparent, detailing the incident and steps taken to resolve it. Managing reputation involves owning the problem and demonstrating steps to prevent future incidents.

Please note this AI-generated summary provides a general overview of the webinar but may not capture all details, nuances, or the exact words of the speaker. For complete accuracy, please refer to the original webinar recording.

Speakers
Ashley Hallene
Ashley Hallene Land Acquisition Specialist
Demeter Land Development

Ashley Hallene is a Land Acquisition Specialist with Demeter Land Development, a Michigan-based company focused on securing land for renewable energy projects, particularly community solar and battery storage developments. Read More ›

Jeffrey Allen
Jeffrey Allen Principal
Graves & Allen

Jeffrey Allen is a principal in the law firm of Graves & Allen, with a general civil practice that, since 1973, has emphasized negotiation, structuring, and documentation of real estate, loans, and other business transactions; receiverships; civil litigation; and bankruptcy. He also does extensive work as an arbitrator and a mediator. He has maintained a Martindale Hubbell Av Rating for over 30 years and has been a Northern California Super Lawyer for over 10 years. Read More ›

Continuing Legal Education (CLE) Credits

*CLE credit is only available to Justia Connect Pros. Not a Pro? Upgrade today>>

Alabama CLE

Status: Approved

Format: On-Demand

Credits: 1.50 General

Earn Credit Until: December 31, 2026

Alaska CLE

Status: Approved

Format: Live (Virtual), On-Demand

Credits: 1.50 Ethics

Earn Credit Until: August 3, 2031

California CLE

Status: Approved

Format: Live (Virtual), On-Demand

Credits: 1.50 Technology in the Practice of Law

Earn Credit Until: June 30, 2028

Hawaii CLE

Status: Approved

Format: Live (Virtual), On-Demand

Credits: 1.50 General

Earn Credit Until: August 3, 2028

Illinois CLE

Status: Approved

Format: Live (Virtual), On-Demand

Credits: 1.50 General

Earn Credit Until: August 3, 2028

Nebraska CLE

Status: Approved

Format: On-Demand

Credits: 1.50 Professional Responsibility

Earn Credit Until: August 4, 2028

New Jersey CLE

Status: Approved

Format: Live (Virtual), On-Demand

Credits: 1.80 Ethics/Professionalism

Earn Credit Until: June 8, 2027

North Carolina CLE

Status: Approved

Format: On-Demand

Credits: 1.50 Technology Training

Earn Credit Until: February 28, 2027

Ohio CLE

Status: Approved

Format: On-Demand

Credits: 1.50 Total: 1.00 General, 0.50 Attorney Professional Conduct

Earn Credit Until: December 31, 2026

Pennsylvania CLE

Status: Approved

Format: Live (Virtual), On-Demand

Credits: 1.50 Substantive Law, Practice, and Procedure

Earn Credit Until: August 3, 2028

Vermont CLE

Status: Approved

Format: Live (Virtual), On-Demand

Credits: 1.50 General

Earn Credit Until: August 4, 2031

West Virginia CLE

Status: Approved

Format: On-Demand

Credits: 1.80 Legal Ethics, etc.

Earn Credit Until: December 31, 2029


This presentation is approved for one and a half hours of General CLE credit in Alabama, one and a half hours of Ethics CLE credit in Alaska, one and a half hours of Technology in the Practice of Law CLE credit in California, one and a half hours of General CLE credit in Hawaii, one and a half hours of General CLE credit in Illinois, one and a half hours of Professional Responsibility CLE credit in Nebraska, one and a half hours of Technology Training CLE credit in North Carolina, one and a half hours of total CLE credit in Ohio, of which 0.50 credit hours will apply to Attorney Professional Conduct credit, one and a half hours of Substantive Law, Practice, and Procedure CLE credit in Pennsylvania, one and a half hours of General CLE credit in Vermont, and one hour of Legal Ethics, etc. CLE credit in West Virginia. This program has been approved by the Board on Continuing Legal Education of the Supreme Court of New Jersey for 1.80 hours of total CLE credit. Of these, 1.80 qualify as total hours of credit for Ethics/Professionalism. An application for accreditation of this activity has been submitted to the MCLE Committee of the State Bar of Texas and is pending.

Justia only reports attendance in jurisdictions in which a particular Justia CLE Webinar is officially accredited. Lawyers may need to self-submit their certificates for CLE credit in jurisdictions not listed above.

Note that CLE credit, including partial credit, cannot be earned outside of the relevant accreditation period. To earn credit for a course, a lawyer must watch the entire course within the relevant accreditation period. Lawyers who have viewed a presentation multiple times may not be able to claim credit in their jurisdiction more than once. Justia reserves the right, at its discretion, to grant an attendee partial or no credit, in accordance with viewing duration and other methods of verifying course completion.

At this time, Justia only offers CLE courses officially accredited in certain states. Lawyers may generate a generic attendance certificate to self-submit credit in their own jurisdiction, but Justia does not guarantee that lawyers will receive their desired CLE credit through the self-submission or reciprocity process.

Looking for CLE credit? Visit CLE Dashboard CLE Accreditation
Watch Related Videos
CLE
Nance Schick
Nance Schick Third Ear Conflict Resolution
Partnership, Not Replacement Leveraging Human Capacity in the Era of Algorithmic Workplace Management
Watch Now
CLE
Dan Gibson
Dan Gibson Davis Hartman Wright
AI-Powered Lawyering Tools To Save Time and Improve Output
Watch Now
CLE
Charity Anastasio
Charity Anastasio The American Immigration Lawyers Association
Conflicts of Interest Identification, Analysis, and Prevention Systems
Watch Now
CLE
Anna Russell
Anna Russell Cornell Law School
Craig Newton
Craig Newton The Legal Information Institute at Cornell Law School
Building Solutions to Legal Information Challenges
Watch Now