CANADABreaches and incidents
Davies confirms cyberattack as Canada's Cyber Centre warns of vishing campaign against law firms
Toronto-based Davies Ward Phillips & Vineberg said an October 23 cyberattack compromised information from one account, making it the second Bay Street firm to confirm a breach this month. The Canadian Centre for Cyber Security warned on October 28 of an ongoing campaign in which callers pose as internal IT support to steal credentials, with October activity concentrated on the legal sector.
Report (The Globe and Mail) → · Canadian Centre for Cyber Security
Key points
- Davies said a cyberattack on October 23 resulted in the compromise of information from one account.The Globe and Mail
- The firm engaged cybersecurity experts, notified law enforcement and has been contacting clients this week.The Globe and Mail
- Osler, Goodmans, Fasken and Blakes told The Globe and Mail they were not affected.The Globe and Mail
- The Cyber Centre's alert says callers impersonate IT help desks, including over Microsoft Teams, and relay MFA codes in real time.Canadian Centre for Cyber Security
- The agency said attackers exfiltrate Microsoft 365 data and send extortion demands, with October activity focused on legal organizations.Canadian Centre for Cyber Security
Sources2 articles across 2 outlets
Canadian Centre for Cyber Security
The Globe and Mail