On March 2, Microsoft announced that some 30,000 organizations using its self-hosted Exchange Server software – which is widely used throughout private industry – had been hacked, in the type of breach that could expose personally identifiable information that triggers data breach notifications. The China-backed Hafnium group, the suspected perpetrators, primarily target U.S. entities, in industries including law firms. Mark Sangster of eSentire Inc. notes that law firms’ data could fall into the hands of hackers that “understand the value attacking law firms can bring.”
Source: