Cybercrime is not caused by lone hackers – it’s a global, professionalised industry. In this interview, Kerrie Machin, Business Development Director, at Mitigo Cybersecurity, explains why cyber risk management can’t be left solely to IT teams, how the most common attacks are unfolding today, and what the regulatory landscape means for law firms.
Q: Kerrie, what is the scale of the cyber threats law firms are currently facing?
A: It’s far more extensive and sophisticated than many firms realise. In 2024 alone, there were approximately 8.6 million cyberattacks reported against UK businesses. It is only set to get worse, in fact, Suzanne Grimmer of the National Crime Agency has predicted that this year will be the worst year on record for ransomware attacks in the UK.
The threat landscape has evolved significantly; cybercriminals now operate with the precision and coordination of a well-organised business. It’s no longer just about phishing emails – it’s a comprehensive ecosystem of threats, including advanced ransomware and supply chain vulnerabilities. Law firms, with their vast repositories of highly sensitive data, are prime targets. Nearly three-quarters of the UK’s…