Office 365 is a staple in many law firms, but it may also be a popular target for hackers looking to exploit contact lists for phishing schemes or sell account access to other bad actors online. While multifactor authentication security protocols can help to effectively—and somewhat easily—mitigate those risks, it’s possible that some smaller and midsized firms may still lack the motivation or assistance required to erect those safeguards.
A 2020 Data Security and Incident Report released last month by law firm Baker & Hostetler indicated that in 31% of the 950 cyber incidents featured, bad actors initiated an Office 365 account takeover following the initial breach.
