Originally published July 25, 2023 by Tony Phung. Updated October 2026.
Small firms get hit by ransomware too, and a little planning goes a long way
Many people assume ransomware only targets big companies. In our experience, smaller firms get hit as well. A local family law firm went through it, and we’re sharing what we learned from the review, without naming them.
What happened
The firm was hit by ransomware. We reviewed their IT afterwards and recovered some files using existing, publicly available decryptors. Some irreplaceable client files, including wills and estates, were still lost.
What our review found
We noticed a few gaps, and they’re common in small firms:
- Backups didn’t follow the 3-2-1 approach: three copies, two kinds of storage, one offsite. Copies that can’t be changed or deleted for a set period help too.
- There was no written recovery plan, so nobody knew what to do first.
- Changes and fixes weren’t tracked in a consistent way. ITIL, a well known set of IT service practices, is a good guide here.
- The network didn’t have a commercial firewall and router, which is a common first layer of defence.
What helps
None of this is unusual, and all of it can be fixed. We usually start with the basics:
- Tested backups with an offsite copy.
- A short written plan: how long can you be down, how much data can you lose, and who do you call?
- A commercial firewall, multi-factor sign-in and regular updates.
- Planned, documented changes.
Not sure where you stand?
If you run a law firm in Vancouver and you’re unsure about your IT setup, we’re happy to take a look. Our reviews are built on ITIL best practices, and we’ll explain what we find in plain words. There’s no pressure and no jargon.
Contact or call (604) 813-7881 for a free consult with Tony.
