Security AlertHigh
Bay Street law firms hit by broader cyberattack
Oct 30, 2026 · Summarized by Fundy Tech from 2 sources
The 30-second version
Several major Canadian law firms say they were breached in a wider campaign. The firms say the damage is contained and affected clients are being notified.
Key points
- BLG, Bennett Jones, McCarthy Tétrault and Davies were affected.
- Bennett Jones said two employee accounts were compromised on Oct. 19.
- The Globe says thousands of files were compromised.
- The Cyber Centre warned of fake IT support and fraudulent sign-in pages.
Why it matters
Law firms handle sensitive client data, so breaches can expose business records and private information. Small businesses that work with outside advisers should ask how those firms protect files and sign-ins.
Who’s affected: Canadian law firms and their clients
What to do
- Watch for breach notices from legal service providers.
- Use strong sign-in protection for cloud accounts.
- Verify any IT support request before clicking.
Original reporting
Not sure if this affects you?
Fundy Tech helps businesses and households across Atlantic Canada stay patched, protected and up to speed. Tell us what you’re running and we’ll tell you straight whether you need to act.