A recent study by Atlas Cloud, auditing over 5,000 UK-based law firms, reveals concerning cyber security vulnerabilities. Nearly three-quarters of firms have had employee passwords leaked into public sources, exposing them to potential criminal exploitation. Shockingly, fewer than half of these firms have implemented a key protective measure to prevent domain hijacking. In this article Pete Watson goes on to discuss the findings of the study and highlights the urgent need for the legal sector to strengthen cyber security measures to safeguard against increasing digital threats.