eCrime drives 82% of cyberattacks on legal sector, CrowdStrike says
Image
United States – October 31, 2026 -- Cyber intrusions targeting the legal sector nearly doubled between 2023 and 2026, according to the CrowdStrike 2026 Legal Threat Landscape Report, as eCrime and nation-state adversaries pursue privileged communications, corporate transactions, intellectual property and financial records.
The report covers activity observed from September 1, 2025 through August 31, 2026. CrowdStrike expects AI advances to let adversaries increase the scale and sophistication of their operations.
Financially motivated actors account for 82% of legal sector activity
Big game hunting adversaries named 455 legal entities on dedicated leak sites, a 39% year-over-year increase. Attackers profit by deploying ransomware or monetizing stolen data through extortion or resale on criminal markets.