Jones Day Hit by Data Breach as Vendor Accellion Hack Widens -

"Jones Day is the second major law firm in two weeks to have private data exposed as a result of a breach at Accellion, which provides file transfer and other services for a number of firms."

Why this is important: International law firm Jones Day has come under scrutiny this month when the Clop ransomware group posted data reportedly stolen from the firm on the dark web. The group claims that it stole the information directly from Jones Day servers and that they notified the firm on February 3, 2021, and that the firm has not responded. Jones Day has publicly denied that the data was taken from their servers and is instead pointing to the cyberattack on Accellion, the file sharing service, which was reported in December 2020. Regardless of where the data was taken from, this report highlights the critical importance of having a comprehensive privacy policy in place -- one that not only controls internal company practices, but that also ensures compliance by all external contractors that have access to sensitive data.