[News](/news) Law in Order attacked by NetWalker ransomware [Blog](/blog)[Breaches](/breaches)[Resources](/resources)[News](/news) # Law in Order attacked by NetWalker ransomware ##### [Edward Kost](/team/edward-kost) November 25, 2020 On Sunday 22nd November, Law in Order experienced a server breach. The attackers held the compromised data hostage by encrypting it, promising to only reverse their actions if a ransom payment is made within seven days. The Australian document and digital service provider for law firms, confirmed the attack in an [official statement](https://www.lawinorder.com.au/news-events/law-in-order-cyber-security-incident). Counter measures were immediately implemented to prevent networked systems from being compromised. “As a precaution, to protect information and systems, Law In Order has limited the access to much of its network which has therefore halted much of our business operations,” the company said in its statement. In a statement update on the 23rd of November, Law in Order announced that it was investigating the extent of the breached data and that there was no concrete proof of any data transfer from their servers. “At this stage we have seen no evidence of data exfiltration nor anything that indicates Law In Orders’ customers’ networks have been compromised.” This statement, however, may require clarification after possible proof of the ransomed data was published online by the attackers. Law in Order fell victim to an innovative form of ransomware known as [NetWalker ransomware](https://www.upguard.com/blog/what-is-netwalker-ransomware). NetWalker is a Windows ransomware created by the [cyber crime group Circus Spider](https://www.hhs.gov/sites/default/files/netwalker.pdf). The group made their ransom software available for hire by criminals in March 2020 when they adopted the [Ransomware-as-a-Service](https://www.upguard.com/blog/what-is-ransomware-as-a-service) (RaaS) model. Since adopting an RaaS model, NetWalker has grown from a minor operation to a significant global threat with [cases spiking in March 2020](https://www.mcafee.com/blogs/other-blogs/mcafee-labs/take-a-netwalk-on-the-wild-side). The illustration below demonstrates the global prevalence of the NetWalker ransomware Victims of a NetWalker [ransomware attack](https://www.upguard.com/blog/ransomware) are presented with a ransom letter written in a notepad document. Here’s a screenshot of a NetWalker ransom note [shared in a tweet](https://twitter.com/raby_mr/status/1237996344410701825). Between March 1 and July 27 of 2020 it’s estimated that [just under A$43.6 million dollars](https://www.itnews.com.au/news/netwalker-ransomware-raiders-rake-in-the-money-551296) worth of Bitcoin was transferred to NetWalker related wallets. The identities of the criminal operatives behind NetWalker are still unknown. In its official statement of the breach, Law in Order announced that they are making progress and will continue to work with cyber security experts to remediate the incident. “We have engaged expert cyber security investigators and advisers, who are working with our team to investigate and respond to the incident. Our priority is to restore systems back online safely and quickly.”  “We are making progress, however it is important that we do this methodically and safely as we work to resume normal business operations.” ## How secure is Law In Order? Law In Order provides document production, eDiscovery, and electronic hearing solutions for legal firms, government agencies, and corporate clients. The company offers services including document copying and printing, electronic evidence processing and hosting, managed document review, and eTrial support through offices operating year-round across Australia. * View our free preliminary report on Law In Order’s security posture * 13 risk factors, including email security, SSL, DNS health, open ports and common vulnerabilities [View Law In Order's score](/security-report/law-in-order) [View score](/security-report/law-in-order) [https://www.lawinorder.com.au/](/security-report/law-in-order) ### Sign up for our newsletter UpGuard's monthly newsletter cuts through the noise and brings you what matters most: our breaking research, in-depth analysis of emerging threats, and actionable strategic insights. ## Latest news Stay up-to-date with the latest news in cybersecurity. [](/news/hugging-face-data-breach-2026-07-20) #### [Hugging Face data breach: key facts and what we know so far](/news/hugging-face-data-breach-2026-07-20) A data breach involving Hugging Face was reported in July 2026. See incident details, impact on customers, and recommended security measures. ##### [UpGuard Team](/team/upguard) July 20, 2026 [](/news/ey-data-breach-2026-07-19) #### [EY data breach: what happened and what's at risk](/news/ey-data-breach-2026-07-19) A data breach involving EY was reported in July 2026. See incident details, impact on customers, and recommended security measures. ##### [UpGuard Team](/team/upguard) July 15, 2026 [](/news/south-florida-injury-convenient-care-data-breach-2026-07-16) #### [South Florida Injury & Convenient Care data breach exposes names and Social Security numbers](/news/south-florida-injury-convenient-care-data-breach-2026-07-16) A data breach involving South Florida Injury & Convenient Care was reported in July 2026. See incident details, impact on customers, and security measures. ##### [UpGuard Team](/team/upguard) July 15, 2026 [](/news/park-west-psychology-data-breach-2026-07-16) #### [Park West Psychology data breach: what happened and what's at risk](/news/park-west-psychology-data-breach-2026-07-16) A data breach involving Park West Psychology was reported in July 2026. See incident details, impact on customers, and recommended security measures. ##### [UpGuard Team](/team/upguard) July 15, 2026 [](/news/fall-river-municipal-credit-union-data-breach-2026-07-16) #### [Fall River Municipal Credit Union data breach: what happened and what's at risk](/news/fall-river-municipal-credit-union-data-breach-2026-07-16) A data breach involving Fall River Municipal Credit Union was reported in July 2026. See incident details, impact on customers, and recommended security measures. ##### [](#) July 14, 2026 [](/news/npcil-data-breach-2026-07-16) #### [NPCIL data breach: World Leaks claims exposure of Kudankulam Nuclear Power Plant files](/news/npcil-data-breach-2026-07-16) A data breach involving NPCIL was reported in July 2026. See incident details, impact on customers, and recommended security measures. ##### [UpGuard Team](/team/upguard) July 14, 2026 [View all news](/news) ## Protect your organization Get in touch or book a free demo. [Contact sales](/demo) [Free demo](/demo) ##### Free instant security score ## How secure is your organization? Request a free cybersecurity report to discover key risks on your website, email, network, and brand. * Instant insights you can act on immediately * Hundreds of risk factors including email security, SSL, DNS health, open ports and common vulnerabilities [Free score](/instant-security-score)