Editor’s Note: This piece is part of a combined series between The Law Journal and its Philadelphia-based sister paper, The Legal Intelligencer, exploring the cybersecurity needs of law firms. Read more articles here.

William Hughes recalls being at a client’s office at 3 a.m.—in the midst of responding to an ongoing cyberattack—when they discovered that the hackers learned of law enforcement’s involvement by infiltrating an employee device.