--- title: 'Cyber Security for Solicitors | UK Law Firms' url: 'https://triplepoint.org.uk/industries/solicitors' markdown: 'https://triplepoint.org.uk/industries/solicitors.md' date: '2026-10-29' description: 'Cyber security for UK law firms: stop conveyancing payment fraud, protect confidential client files, and meet SRA and insurer expectations. From £13/user.' --- # Cyber Security for Solicitors | UK Law Firms ## Why solicitors are targeted Law firms hold two things criminals want: client money passing through on its way to somewhere else, and confidential information that clients trust you to keep private. Conveyancing makes the money especially attractive. Large sums move on a known day, between people who mostly communicate by email. An attacker who gets into a mailbox, at your firm or your client's, can watch a transaction for weeks and step in at exactly the right moment with "updated" bank details. ## What we see ### Conveyancing payment fraud A criminal intercepts the emails around a purchase and sends new bank details, apparently from your firm or the client, just before completion. Often called Friday afternoon fraud, it can take a client's entire deposit. ### Your firm being impersonated Fake emails, look-alike domains and cloned websites using your firm's name to trick clients and other firms into paying the wrong account. ### Confidential files Case files, wills, family and employment matters hold some of the most sensitive information there is. A breach damages clients and your reputation, and may need reporting to the ICO and the SRA. ### Ransomware before a deadline Losing access to case files and the case management system stops work, and attacks are usually launched outside business hours, when nobody is watching. ## What clients, insurers and regulators expect - **The SRA.** Firms must protect client money and keep clients' affairs confidential, and are expected to report serious problems to the SRA promptly. A cyber attack that leads to lost client money or exposed client information can fall into that. - **UK GDPR.** Your firm is responsible for the personal data it holds. A breach that puts people at risk must be reported to the ICO within 72 hours of you becoming aware of it. - **Insurers.** Professional indemnity and cyber insurers ask about multi-factor authentication, email security, device protection and monitoring, and payment fraud claims are a major concern for them. - **Clients and lenders.** Corporate clients and lender panels increasingly send security questionnaires before they work with a firm. What we recommend ## Protection for solicitors From£4 ### Email security Filters impersonation, look-alike domains and malicious attachments out of your mailboxes, and can encrypt sensitive emails automatically. Per user, per month, excluding VAT. [More details](https://triplepoint.org.uk/security/people-and-email/email-security) From£8 ### Identity threat detection (ITDR) Spots stolen passwords and suspicious Microsoft 365 sign-ins, the usual first step before an attacker starts watching a transaction. Per user, per month, excluding VAT. [More details](https://triplepoint.org.uk/security/detect-and-respond/identity-protection) From£13 ### 24/7 managed detection & response (MDR) A 24/7 team watching your devices and systems, including evenings and weekends, and stepping in to contain an attack. Per user, per month, excluding VAT. [More details](https://triplepoint.org.uk/security/detect-and-respond/mdr) From£4 ### Phishing simulation & training Practice phishing emails and short training, so fee earners and support staff spot the real thing under deadline pressure. Per user, per month, excluding VAT. [More details](https://triplepoint.org.uk/security/people-and-email/phishing-simulation) From£2 ### Disk encryption Encrypts laptops so one left at court or on a train is an inconvenience, not a reportable breach. Per user, per month, excluding VAT. [More details](https://triplepoint.org.uk/security/devices/disk-encryption) ### Business email compromise If a mailbox is compromised, we lock the attacker out, find out what they saw and help you contact the right people quickly. [More details](https://triplepoint.org.uk/security/incident-response/business-email-compromise) ## How we work with law firms A typical small firm has between 10 and 50 people, an IT provider for day-to-day support, a case management system, and nobody whose job is security. That's the gap we fill. We start with a conversation about how your firm works: where client files live, how money moves, how your team works remotely, and what your insurer asks for. Then we recommend the protection that fits, with prices up front. Everything runs from one platform with one monthly invoice, and you can add to it as you grow. Questions How do we stop conveyancing payment fraud?+Tell clients at the start, in writing and in person, that your bank details will never change by email. Confirm any change of details by phone using a number you already hold, and protect every mailbox with multi-factor authentication. Our guide to [invoice fraud](https://triplepoint.org.uk/guides/invoice-fraud-business-email-compromise) explains how these attacks work. We already have an IT provider. Do we need you as well?+Usually yes, and the two work well together. Your IT provider looks after users, software and hardware. We supply and manage the security: the protection itself and the 24/7 monitoring behind it. What would this cost for a 20-person firm?+Our 24/7 MDR starts at £13 per user per month, so from £260 a month for 20 people, excluding VAT. Email security and the other controls are priced per user too. Use the [price calculator](https://triplepoint.org.uk/security) for your own numbers. Where to go next- [Invoice fraud: how business email compromise works and how to stop it](https://triplepoint.org.uk/guides/invoice-fraud-business-email-compromise) - [Do we need to report a cyber attack? UK rules for small businesses](https://triplepoint.org.uk/guides/report-a-cyber-attack-uk) - [Cyber insurance requirements: what UK insurers ask small businesses for](https://triplepoint.org.uk/guides/cyber-insurance-requirements-uk) - [Compare our five protection tiers and prices](https://triplepoint.org.uk/security#protection-tiers) [< Back to Industries](https://triplepoint.org.uk/industries) ## Not sure what you need? Tell us a little about your business and we'll recommend the controls that will work best for you, with no obligation and no jargon. [Talk to us](https://triplepoint.org.uk/contact?about=Solicitors) or [See every security area](https://triplepoint.org.uk/security) Our experts spent 20 years at Sophos and include a certified ethical hacker. [More about us](https://triplepoint.org.uk/about) --- ## Navigation - Parent: [Cyber Security for Professional Firms & Charities](https://triplepoint.org.uk/industries.md) - Previous: [Cyber Security for Insurance Brokers | UK](https://triplepoint.org.uk/industries/insurance-brokers.md)