If cyber researchers can find an exposed database of legal documents like this, then so can the bad guys.
If you rely on a third party to manage documents (or any other form of sensitive data), it's essential to actively 'trust but verify' that they are protecting your sensitive material ... through monitoring, audits, or other mechanisms.
A data security flaw has left more than 10,000 legal documents containing sensitive details of commercial property owners unsecured for years in an online database, potentially affecting the clients of about 190 law firms.
The cache of documents, which included Companies House property transaction forms containing authentication details such as email addresses and passwords, had been scanned and uploaded by legal firms — including three of the “magic circle” — using a product from Advanced Computer Software, Britain’s third-largest software company.
/Passle/5e1358328313d50770039d23/MediaLibrary/Images/6093fd71e5416b04ac4aebca/2024-01-09-14-29-41-938-659d5855146256acfd0a0c9b.jpg)
/Passle/5e1358328313d50770039d23/SearchServiceImages/2024-04-18-13-21-01-803-66211e3d7330266071d541da.jpg)
/Passle/5e1358328313d50770039d23/SearchServiceImages/2024-04-16-18-48-31-181-661ec7ff631126c32d270bbb.jpg)
/Passle/5e1358328313d50770039d23/SearchServiceImages/2024-04-16-07-49-16-790-661e2d7c4025ff662f6862d1.jpg)