Security: lawyers effectively saying 'take what you want' to hackers by using technology without virtual private networks

Law firms are exposing themselves to 'huge legal claims' from clients by failing to protect their communications when they use wireless technology, a City firm warned this week.


Charles Russell partner Robin Bynoe said many lawyers were unaware of the risks attached to using 'Wi-Fi' technology to access client information from laptops while away from the office.


A joint investigation by Charles Russell and wireless Internet provider iBAHN found that communications sent from laptops in hotels and other public places could be easily tapped into by hackers nearby. Such security breaches can be prevented through the use of virtual private network (VPN) schemes.


Mr Bynoe said: 'This is particularly dangerous for law firms because they will be handling client information, and they probably do not have the ability to put in their terms and conditions of business that they are entitled to play fast and loose with client information. Other businesses that hold third-party data could exclude liability, but I do not think lawyers would be able to.


'I suspect that not enough law firms are protecting their wireless communications. I have not heard of firms being concerned about this. I would be surprised if many law firms have read the riot act to the many assistant solicitors who travel round the country using laptops [about what precautions should be taken].'


Mr Bynoe added that law firms are also often operators of Wi-Fi technology, as they provide Wi-Fi 'hotspots' in their reception areas.


Graeme Powell, European managing director of iBAHN, said law firms needed to continually update their Wi-Fi security policies.


He said: 'Advances in wireless technologies mean that security should be top of any business agenda to protect networks from the theft of confidential data. Corporate businesses should have secure VPN schemes to protect against exactly this type of risk.'


He added: 'Ignoring Wi-Fi security for your remote workers is akin to putting a sign outside the door saying, "take what you want".'