MTC/BOLO: 🚨 Cybersecurity Alert: Chinese Hack Exposes Vulnerabilities in Mobile Data 🚨

A massive Chinese espionage campaign has recently targeted major U.S. telecommunications companies, compromising data from hundreds of thousands of American mobile phone users. This unprecedented cyber assault, dubbed "Salt Typhoon," has affected at least eight major telecom providers, including Verizon and AT&T, ranking among the most extensive intelligence breaches in American history. 📱💻

The Scope of the Breach 🔍

The Chinese hackers exploited weaknesses in the communications networks of top telecommunications companies. They gained access to a vast amount of data, including:

• Who mobile phone users were talking to

• When conversations took place

• User locations

• In some cases, audio calls and text messages

Initially focusing on the national capital region, the hackers narrowed their targets to high-profile Americans, including:

• Top government officials in the Biden administration

• At least one cabinet secretary

• A top White House Homeland Security Adviser

• President-elect Donald Trump

• Vice President-elect JD Vance

• Staff of Senator Chuck Schumer

The breach also compromised data about sensitive Department of Justice warrants. 🏛️

Ongoing Threat and Uncertain Timeline ⏳

U.S. officials warn that the breach is ongoing. They cannot confirm that the hackers have been fully removed from the affected networks. The FBI and Cybersecurity and Infrastructure Security Agency (CISA) are still trying to understand the full scope of this activity. There is no clear timeline for when telecommunications companies will be fully secure. 🕵️‍♀️

Ethical Obligations for Lawyers 📜⚖️

For lawyers and legal professionals, the ethical obligation to protect client data extends beyond general cybersecurity practices. The American Bar Association (ABA) Model Rules of Professional Conduct provide specific guidance on this matter.

1. Duty of Competence 🧠

ABA Model Rule 1.1 requires lawyers to provide competent representation to clients. This includes staying current with technology. Comment 8 to Rule 1.1 explicitly states that lawyers must understand "the benefits and risks associated with relevant technology". This means lawyers must:

• Understand the technologies they use in their practice

• Stay informed about evolving cybersecurity threats

• Implement appropriate security measures

2. Duty of Confidentiality 🤐

Rule 1.6(c) mandates that lawyers "make reasonable efforts to prevent the inadvertent or unauthorized disclosure of, or unauthorized access to, information relating to the representation of a client". This rule directly applies to electronic communications and data storage. Lawyers must:

• Assess the sensitivity of client information

• Implement appropriate security measures based on the nature of the data

• Regularly review and update security protocols

3. Communicating with Clients 💬

Under Rule 1.4, lawyers have a duty to communicate with clients about the means by which their objectives are to be accomplished. This includes discussing:

• Risks associated with various communication methods

• Potential need for enhanced security measures

• Client preferences regarding communication methods

Recommendations for Securing Mobile Data 🔒

In light of this breach and to meet ethical obligations, lawyers, their clients, and the general public should take the following steps to secure their mobile data:

1. Use Encrypted Communication Apps 🔐

U.S. officials strongly recommend using encrypted communication apps like Signal. These apps offer end-to-end encryption, making it extremely difficult for hackers to intercept messages or calls.

2. Enable Multi-Factor Authentication (MFA) 🔑

Turn on MFA for all your accounts. This adds an extra layer of security beyond just a password, significantly reducing the risk of unauthorized access.

3. Use Strong Passwords and Biometric Authentication 👆

Create complex, unique passwords for each account. Consider using a password manager. Enable biometric authentication methods like fingerprint or facial recognition where available.

4. Keep Software Updated 🔄

Regularly update your device's operating system and apps. These updates often include critical security patches.

5. Be Cautious with Public Wi-Fi 📶

Avoid using unsecured public Wi-Fi networks. If necessary, use a VPN to encrypt your internet traffic.

6. Only Download Apps from Trusted Sources 📲

Stick to official app stores like Google Play or the Apple App Store. Avoid downloading apps from unknown websites or sources.

7. Implement Device Encryption 🔒

Ensure your device's storage is encrypted. Most modern smartphones offer built-in encryption options.

8. Use Secure Cloud Storage ☁️

Store sensitive documents in secure, encrypted cloud storage services.

See my earlier post:  “How too …”: 🔒 Securing Cloud Storage for Lawyers: Best Practices and Ethical Considerations!.

9. Enable Remote Wipe Capabilities 🧹

Set up the ability to remotely wipe your device if it's lost or stolen.

See my earlier post:  "How to ....": Enable Remote Wipe Capabilities 🧹 (Mobile Phone📱/Tablet Edition).

10. Be Wary of Phishing Attempts 🎣

Stay alert for phishing emails or messages. Verify the sender's identity before sharing any sensitive information.

Special Considerations for Lawyers 👨‍⚖️👩‍⚖️

In some cases, standard security measures may not be sufficient. The ABA Opinion 477R suggests that lawyers may need to take special precautions when:

• Handling particularly sensitive client information

• Complying with specific client instructions or agreements

• Adhering to regulatory requirements (e.g., HIPAA, GDPR)

In such instances, lawyers might need to employ:

• End-to-end encryption for all communications

• Multi-factor authentication for all systems

• Regular third-party security audits

My Final Thoughts 🏁

The recent and ongoing Chinese hack of major U.S. telecom providers highlights the critical need for robust mobile security measures. For lawyers, maintaining technological competence and protecting client data is not just a matter of good practice—it's an ethical imperative. By staying informed about cybersecurity risks, implementing robust security measures, and communicating clearly with clients about these issues, lawyers can fulfill their ethical obligations and protect their clients' interests in the digital age.

Remember, cybersecurity is an ongoing process. Stay vigilant and regularly review and update your security practices. In today's digital landscape, protecting your mobile data is not just a matter of personal privacy—it's a professional and ethical obligation, especially for those handling sensitive client information. 🛡️📱💼

MTC

🚨BOLO: AI Malpractice🚨: Texas Lawyer Fined for AI-Generated Fake Citations! 😮

We’ve been reporting on lawyers incorrectly using AI in their work; but, the lesson has not yet reached all practicing lawyers: Here is another cautionary tale for legal professionals!

No lawyer wants to be disciplined for using generative ai incorrectly - check your work!

A Texas lawyer, Brandon Monk, has been fined $2,000 for using AI to generate fake case citations in a court filing. U.S. District Judge Marcia Crone of the Eastern District of Texas imposed the penalty and ordered Monk to complete a continuing legal education course on generative AI. This incident occurred in a wrongful termination case against Goodyear Tire & Rubber Co., where Monk submitted a brief containing non-existent cases and fabricated quotes. Concernedly, he was using Lexis AI function in his work - check out the report card a Canadian law professor gave Lexis+ AI in my editorial here. The case highlights the ethical challenges and potential pitfalls of using AI in legal practice.

The judge's ruling emphasizes that attorneys remain accountable for the accuracy of their submissions, regardless of the tools used.

Read the full article on Reuters for an in-depth look at this landmark case and its implications for the legal profession.

Be careful out there!

MTC/🚨BOLO🚨: Lexis+ AI™️ Falls Short for Legal Research!

As artificial intelligence rapidly transforms various industries, the legal profession is no exception. However, a recent evaluation of Lexis+ AI™️, a new "generative AI-powered legal assistant" from LexisNexis, raises serious concerns about its reliability and effectiveness for legal research and drafting.

Lexis+ AI™️ gets a failing grade!

In a comprehensive review, University of British Columbia, Peter A. Allard School of Law law Professor Benjamin Perrin put Lexis+ AI™️ through its paces, testing its capabilities across multiple rounds. The results were disappointing, revealing significant limitations that should give legal professionals pause before incorporating this tool into their workflow.

Key issues identified include:

1. Citing non-existent legislation

2. Verbatim reproduction of case headnotes presented as "summaries"

3. Inaccurate responses to basic legal questions

4. Inconsistent performance and inability to complete requested tasks

Perhaps most concerning was the AI's tendency to confidently provide incorrect information, a phenomenon known as "hallucination" that poses serious risks in the legal context. For example, when asked to draft a motion, Lexis+ AI™️ referenced a non-existent section of Canadian legislation. In another instance, it confused criminal and tort law concepts when explaining causation.

These shortcomings highlight the critical need for human oversight and verification when using AI tools in legal practice. While AI promises increased efficiency, the potential for errors and misinformation underscores that these technologies are not yet ready to replace traditional legal research methods or professional judgment.

For lawyers considering integrating AI into their practice, several best practices emerge:

lawyers need to be weary when using generative ai! 😮

1. Understand the technology's limitations

2. Verify all AI-generated outputs against authoritative sources

3. Maintain client confidentiality by avoiding sharing sensitive information with AI tools

4. Stay informed about AI developments and ethical guidelines

5. Use AI as a supplement to, not a replacement for, human expertise

Just like in the United States, Canadian law societies and bar associations are beginning to address the ethical implications of AI use in legal practice. The Law Society of British Columbia has published guidelines emphasizing the importance of understanding AI technology, prioritizing confidentiality, and avoiding over-reliance on AI tools. Meanwhile, The Law Society of Ontario has set out its own set of similar guidelines. Canadian bar ethics codes may be structured somewhat differently than the ABA Model Rules of Ethics and some of the provisions may diverge from each other, the themes regarding the use of generative AI in the practice of law ring similar to each other.

Canadian law societies and bar associations, mirroring their U.S. counterparts, are actively addressing the ethical implications of AI in legal practice. The Law Society of British Columbia has issued comprehensive guidelines that underscore the critical importance of understanding AI technology, safeguarding client confidentiality, and cautioning against excessive reliance on AI tools. Similarly, the Law Society of Ontario has established its own set of guidelines, reflecting a growing consensus on the need for ethical AI use in the legal profession.

While the structure of Canadian bar ethics codes may differ from the ABA Model Rules of Ethics, and specific provisions may vary between jurisdictions, the overarching themes regarding the use of generative AI in legal practice are strikingly similar. These common principles include:

1. Maintaining competence in AI technologies

2. Ensuring client confidentiality when using AI tools

3. Exercising professional judgment and avoiding over-reliance on AI

4. Upholding the duty of supervision when delegating tasks to AI systems

5. Addressing potential biases in AI-generated content

Hallucinations can end a lawyers career!

This alignment in ethical considerations across North American jurisdictions underscores the universal challenges and responsibilities that AI integration poses for the legal profession. As AI continues to evolve, ongoing collaboration between Canadian and American legal bodies will likely play a crucial role in shaping coherent, cross-border approaches to AI ethics in law.

It is crucial for legal professionals to approach these tools with a critical eye. AI has the potential to streamline certain aspects of legal work. But Professor Perrin’s review of Lexis+ AI™️ serves as a stark reminder that the technology is not yet sophisticated enough to be trusted without significant human oversight.

Ultimately, the successful integration of AI in legal practice will require a delicate balance – leveraging the efficiency gains offered by technology while upholding the profession's core values of accuracy, ethics, and client service. As we navigate this new terrain, ongoing evaluation and open dialogue within the legal community will be essential to ensure AI enhances, rather than compromises, the quality of legal services.

MTC

🚨 BOLO 🚨 : Beware of phishing emails impersonating federal court CM/ECF notifications!

🚨 Today, I received notices from two different courts about illicit emails posing as court communications (see pictures below). 📨 It can sometimes be easy to ignore the “generic” clerk’s e-mail.

🔒 Remember, scammers may send fake emails with malicious links or attachments claiming to be from courts. Always verify emails before clicking links or downloading files. Access court documents directly through official PACER/CM/ECF portals. 🛡️

🚫 Report suspicious emails to your court.

Stay vigilant to protect sensitive case information and maintain cybersecurity. 🛡️💻

From the United States District Court of Maryland…

From the United States Southern District Court of indiana…

🚨BOLO: Lawyers Beware of Fake Chrome Errors Hijacking Computers!🚨

Lawyers beware of browser pop-ups! It could lead to malware and bar ethics issues!!!

A new cybersecurity threat is targeting Google Chrome users.[1] Fake error messages are being used to hijack computers. These deceptive pop-ups trick users into thinking their system have critical issues. Once users engage with these messages, they risk downloading malicious software or giving remote access to hackers.

Key Points of the Threat:

• Fake error messages mimic genuine Chrome alerts.

• The goal is to panic users into taking immediate action.

• Engaging with these messages can lead to malware installation or remote control of the computer.

• Lawyers, due to their sensitive data, are particularly at risk.

Proactive Tips for Lawyers Using Chrome: 

Recognize Fake Error Messages -

• Be aware that Chrome does not display critical error messages urging immediate action.

• Verify any error message by checking Chrome's official support pages or consulting IT support.

Avoid Clicking on Suspicious Pop-Ups:

• Do not click on any unexpected pop-ups or error messages.

• Close the tab or window immediately if a suspicious message appears.

Keep Software Updated:

• Ensure Chrome and all other software are up-to-date.

• Regular updates often include security patches that protect against new threats.

Install a Reliable Antivirus Program:

• Use trusted antivirus software to scan for and remove malware.

• Regularly update your antivirus program to protect against the latest threats.

Use Pop-Up Blockers:

• Enable pop-up blockers in Chrome to prevent unwanted messages from appearing.

• Adjust settings to block sites known for malicious content.

Educate Your Team:

‼️ be careful: Browser pop-ups could be malicious actors trying to hack into your computer! ‼️

• Inform all staff members about the fake error message threat.

• Provide training on how to identify and respond to suspicious activity.

Backup Important Data:

• Regularly back up all important files to a secure location.

• Ensure backups are complete and can be restored if needed.

Review and Update Security Policies:

• Update your firm’s cybersecurity policies to include guidance on handling fake error messages.

• Ensure all employees are aware of and follow these policies.

Monitor Network Activity:

• Increase monitoring for unusual activity on your network.

• Use tools to detect and respond to potential threats quickly.

Consult with IT Professionals:

• Work with IT experts to enhance your cybersecurity measures.

• Seek advice on the best practices to protect your firm from these types of attacks.

Report Suspicious Activity:

Lawyers beware of browser pop-ups! You could expose your client’s sensitive informaiton to bad actors!

• Report any suspicious messages or activity to your IT department immediately.

• Document the incident for future reference and analysis.

Use Secure Browsing Practices:

• Avoid visiting suspicious websites or downloading unknown software.

• Use secure, verified websites for all browsing and downloads.

Stay tuned 📺 as your TSL continues to monitor 👀 this issue and provide updates! 📢

Stay tuned 📺 as your TSL continues to monitor 👀 this issue and provide updates! 📢

Follow The Tech-Savvy Lawyer Blog as we will continue to monitor this issue and provide updates. Stay vigilant and proactive in protecting your digital environment. These measures will help safeguard your practice and maintain the confidentiality of your client information. Stay tuned for more insights and recommendations on cybersecurity threats.

Happy Lawyering!

[1] https://lifehacker.com/tech/ignore-these-fake-chrome-errors-that-hijack-your-computer

BOLO: New Malicious Android Apps Targeting Lawyers - How to Protect Yourself

As lawyers, we rely heavily on our mobile devices to stay connected and productive while on the go. However, a recent report has uncovered a disturbing trend of malicious Android apps specifically designed to target professionals like us. These apps can compromise sensitive client data, steal login credentials, and even enable remote monitoring of our devices.

The Problem: Malicious Apps Masquerading as Legitimate Tools

According to the report, cybercriminals are creating fake apps that mimic popular productivity tools and utilities - including those used by attorneys! These malicious apps often sneak into official app stores by bypassing security checks through clever obfuscation techniques. Once installed, they can grant remote access to your device, enabling cybercriminals to monitor your activities, steal confidential data, and even record audio or video without your knowledge. This poses a severe risk to attorney-client privilege and data privacy.

Suggestions to Avoid Malicious Apps

As lawyers, we must remain vigilant and take proactive steps to protect ourselves, our clients, and our firms from these threats. Here are some suggestions to help you avoid falling victim to malicious apps:

1. Stick to Official App Stores
   While not foolproof, official app stores like Google Play have more robust security measures in place. Avoid downloading apps from third-party sources or untrusted websites.

2. Research Apps Before Installing
   Before installing any app, thoroughly research it. Read reviews, check the developer's reputation, and look for any red flags or suspicious behavior reported by other users.

3. Keep Your Device Updated
   Ensure that your Android device is running the latest version of the operating system and that all apps are up-to-date. Software updates often include critical security patches that can protect against known vulnerabilities.

4. Use Reputable Antivirus and Security Apps
   Install a reputable antivirus and mobile security app on your device. These apps can scan for and detect malicious software, protecting you from potential threats.

5. Be Cautious with Permissions
   When installing an app, carefully review the permissions it requests. If an app asks for excessive or unnecessary permissions (e.g., a calculator app requesting access to your contacts or location), it could be a red flag.

6. Regularly Review Installed Apps
   Periodically review the apps installed on your device and remove any that you no longer use or recognize. Unused apps can become potential entry points for cybercriminals.

7. Implement Firm-Wide Security Policies
   If you work at a law firm, collaborate with your IT department to implement firm-wide security policies and best practices for mobile device usage and app installation.

Staying vigilant and taking proactive measures to protect your mobile devices is crucial in today's threat landscape. By following these suggestions, you can significantly reduce the risk of falling victim to malicious apps and safeguard your clients' sensitive information. Remember, as lawyers, we have an ethical obligation to maintain the confidentiality and integrity of client data. Prioritizing mobile security is not just a best practice; it's a professional responsibility.

Happy Lawyering!

BOLO/Word-Phrase of the Week/How to . . . Update your Chrome Browser ASAP!

Lawyers need to ensure their software is always up to date protect themselves from unkown software security flaws!

BOLO: Google has released an urgent security update for Chrome to address a critical zero-day vulnerability, identified as CVE-2024-4671. This vulnerability is a "use-after-free" issue within Chrome's visual component, which could allow remote attackers to execute arbitrary code on an affected system just by visiting a malicious website. This flaw is actively being exploited in the wild, making it essential for both Mac and Windows OS users to update their browsers immediately to protect against potential attacks.

While this alert should be troubling, Chrome users and users who use Chrome-based browsers, e.g., Brave, Microsoft Edge, and Opera, should also be aware that this is the seventh of eight security warnings this year (with four of the alerts just this month). It is imperative that you regularly check that your software is up to date from zero-day software vulnerabilities.

keeping your software up to date can help mitigate against “zero-day” secuirty flaws!

Word/Phrase of the Week – What is a “Zero-Day” vulnerability?  A "zero-day" security flaw refers to a software vulnerability that is unknown to the software's developers or the public. Because the developers are unaware of the flaw, there is no patch or fix available. The term "zero-day" highlights that there are zero days between the discovery of the vulnerability and its exploitation, meaning the flaw can be exploited by attackers immediately after its discovery. This makes zero-day vulnerabilities particularly dangerous, as they can be used to launch attacks before any defense or mitigation can be implemented.

How To update Chrome:  Users should go to the menu (three dots in the upper-right corner) on your browser window, select "Help," then "About Google Chrome," and follow the instructions to install the update and relaunch the browser. This update also impacts other Chromium-based browsers, see above, which should also be updated as soon as possible to mitigate this security risk.

Happy Lawyering and Stay Safe Out There!

BOLO: Increased Solar Storms: A Potential Disruption for Lawyers!

Lawyers need to prepare their office tech for the increase of solar flares this year!

Recent solar disturbances have raised concerns about potential impacts on various aspects of modern life, including the legal profession. Lately, the sun has been exhibiting heightened activity, leading to powerful solar flares and coronal mass ejections (CMEs). These solar disturbances can trigger geomagnetic storms that may disrupt various technologies we rely on daily.  Such intense flares can impact radio communications, electric power grids, and navigation signals and pose risks to spacecraft and astronauts.

While solar storms are not uncommon, the current solar cycle is expected to reach its peak activity in 2024 and 2025. Experts predict an increased likelihood of severe geomagnetic storms, classified as G5 events, during this period.  So, what does this mean for the legal profession?

Potential Impacts on Legal Professionals

As lawyers, we heavily rely on technology for communication, research, document management, and court proceedings. A significant solar storm could potentially disrupt these essential tools and workflows.  Here are some examples:

lawyers can reduce the anxiety in their life by preparing their technology for the potential disruptions from Solar flares!

• Communication Disruptions: Solar storms can interfere with radio and satellite communications, affecting email, video conferencing, and phone systems. This could hinder communication with clients, colleagues, and courts.

• Power Grid Instability: Intense geomagnetic storms can induce currents in power lines, potentially damaging transformers and causing widespread power outages. Prolonged blackouts could severely impact law firm operations and court proceedings.

• Navigation System Failures: Solar storms can disrupt GPS and other satellite navigation systems, making it challenging for lawyers to attend court hearings, client meetings, or navigate to remote locations.

• Data and Document Access Issues: If power outages or communication disruptions occur, accessing online legal databases, cloud-based document management systems, and electronic case files could become problematic.

Preparing for Potential Disruptions

While the likelihood of a severe solar storm is uncertain, it's crucial for legal professionals to be proactive and have contingency plans in place:

• Contingency Planning: Developing comprehensive contingency plans for critical processes can help minimize disruptions. This includes having manual processes as backups for essential digital tasks and ensuring all team members are trained on these procedures.

• Data Backup: Regularly backing up data using multiple methods (cloud storage and physical backups) ensures that even if one system fails due to a surge or outage caused by geomagnetic activity, another can step in to prevent data loss. Don’t forget my “3-2-1” data backup strategy!

lawyers can take some proactive measures to secure their client’s information, office technology and their ethical responsibilties!

• Infrastructure Protection: Investing in surge protection devices and uninterruptible power supplies (UPS) can safeguard sensitive electronic equipment from sudden spikes in voltage during geomagnetic storms.

• Staying Informed: Monitoring space weather forecasts provided by organizations like the National Oceanic and Atmospheric Administration (NOAA) Space Weather Prediction Center enables firms to anticipate significant events and take preventative measures accordingly.

• Client Communication: Legal professionals should maintain open lines of communication with clients about potential risks to their cases or information due to technological disruptions from solar activity.

By being aware of the potential impacts of solar storms and taking proactive measures, lawyers can minimize disruptions to our practice and better serve their clients during these rare but potentially disruptive events.

Happy Lawyering!

BOLO: Locked Out Of Your Apple Account Last Weekend? You're Not Alone!

Be wary of unsolicted requests to “reset” your password!

Over the past weekend or perhaps on Monday morning, Lawyers who use Apple products may have found themselves locked out of their Apple account. Don't worry, you are not alone.

The internet noted a surge in Apple users being asked to reset their passwords. I was one of them.  Instinctively, I was concerned that the request was sort of spam - I hadn't changed my password or done anything I thought may have triggered a rest.  This situation is frustrating as you have to go back into the recesses of your mind and ask yourself, "did I make a mistake?" or "am I being hacked?" Then you have to go through a litany of resets not just on your devices but sometimes in some of your application accounts that rely on that password.  But why is this happening? 😡

The phenomenon of getting locked out of an Apple account can be as perplexing as it is frustrating for users. This issue, surprisingly common, stems from a variety of reasons rooted in Apple's commitment to safeguarding user privacy and security. Understanding these reasons can provide insights into the complexities of digital security and the measures companies like Apple take to protect user data.

One primary reason users find themselves locked out is due to incorrect password entries. Apple's security protocols are stringent; entering a wrong password multiple times triggers a lockout mechanism designed to protect against unauthorized access attempts. This feature reflects the delicate balance between user convenience and the necessity of securing personal information against potential cyber threats.

Nothing indces panic more than when you are locked out of your account due to a “password reset” issue!!! 😬

Another significant factor contributing to account lockouts is suspicious activity detection. Apple monitors accounts for unusual behavior that could indicate a security breach, such as logging in from an unfamiliar location or device, making unauthorized purchases, or attempting to change sensitive account information without proper authentication. When such activities are detected, Apple may lock the account as a precautionary measure until the rightful owner can verify their identity.

The activation lock feature on iOS devices also plays a crucial role in this context. Designed to deter theft and unauthorized use, this feature requires users to enter their Apple ID and password after resetting an iOS device or attempting to deactivate Find My iPhone. Users who forget their credentials or acquire a second-hand device without having the previous owner remove theirs can find themselves unable to access their device entirely.

Furthermore, outdated or compromised account details contribute significantly to this issue. Users who neglect to update their email addresses or security questions might struggle with recovery options when trying to regain access to their accounts. Similarly, if an Apple ID becomes compromised due to phishing scams or data breaches on other platforms where similar login credentials were used, users might be locked out as part of Apple's response to suspicious account activity.

Lastly, compliance with legal requests can result in account deactivation or restriction. In rare cases where an account is suspected of engaging in illegal activities or violating terms of service, Apple may restrict access pending investigation.

These scenarios underscore the intricate challenges tech companies face in securing user accounts while maintaining ease of use. They highlight not just potential vulnerabilities within digital identities but also reflect broader concerns around privacy, data security, and consumer protection in our increasingly interconnected world.

Despite all of these potential reasons for being locked out, Apple tends to be a bit secretive if the issue is not created by the user.  This can be additionally frustrating as a user would like to know what is going on.  And I'd like to know that my information is secure (with Apple's known history of privacy and security, it generally is, but nevertheless, I'd like to be sure). It's equally frustrating as at the time of this posting, I am not aware that Apple has released a statement as to what happened.

So, what do you do to regain access to your account. 🧐

Don’t panic when you are asked to reset your password! Think it through and you should be alright! 🤗

Initially, the most straightforward action is to reset your password. Apple provides a streamlined process for this through its official website or directly from your device's settings. Other software service providers have similar protocols - it's always best to go straight to the provider's site or hardware device settings.  Clicking on random links or responding to unsolicited message requests is never a good idea.  But, once you go through a company's official process, the system will typically ask for some form of identification. This could be answering security questions you set up previously or entering a code sent to a trusted device. This step is designed with user security in mind, ensuring that only the rightful owner can reset the password.

Remember, always be vigilant when you are asked to reset your passwords or need to reset them!

Happy Lawyering!

My Two Cents/BOLO: Privacy Alert for Legal Pros: Navigating Discord's Data Vulnerabilities and Maintaining Client Confidentiality on the Internet

Lawyers can learn a valuable lesson from a recent privacy breach alert for Discord users. Discord, originally designed for gamers to communicate while gaming, is a versatile chat app like Slack or Skype, offering real-time messaging, voice, and video to its over 100 million users. Discord users faced a privacy issue where their data on public servers has been scraped and sold. An online service named Spy Pet has been collecting data from thousands of Discord servers and selling it cheaply for various purposes, including to law enforcement and AI companies. This has raised concerns because the data includes user activities and messages, even though private direct messages remain secure.

Lawyers need to be careful about what services they use when communicating client information on the internet.

Here are some General Tips for Lawyers on Protecting Privacy when using Discord and Similar Platforms:

Be cautious about what you share on public servers since anything posted can potentially be scraped.

Monitor and manage server bots carefully to avoid unwanted data scraping. Remove or ban suspicious accounts.

Adjust server privacy settings to restrict who can join and view content.

Lawyers should be especially cautious when using platforms like Discord for any sensitive communications. Given the lack of end-to-end encryption for public server messages and the potential for data scraping:

Lawyers are a guardian of their client’s information when using it online!

• Avoid sharing any confidential information that could compromise client privacy.

• Utilize platforms that are specifically designed for secure, encrypted communications to ensure confidentiality and compliance with legal standards.

Always assume that any data shared on non-encrypted platforms could be accessed by unintended parties. Most of the popular Law Practice Management Programs and paid communication platforms should be secure. But it's always best to check a company's Terms of Service and online reputation before entering client confidential or private information.

MTC

Happy Lawyering!