Does legal malpractice insurance cover cyber attacks?

Generally no - LPL policies largely exclude cyber events. Malpractice coverage may respond to a professional-negligence claim that follows an incident (a missed deadline while systems were down), but the breach itself - forensics, notification, ransomware, diverted wires - needs a cyber policy, and the two forms must meet without a gap.

What cyber coverage do law firms need most?

Funds-transfer fraud and social engineering coverage first - the diverted closing or settlement wire is the signature law-firm loss, and the form must cover client funds under the firm's control, not just firm funds. Then ransomware/extortion with business interruption, breach response, and third-party privacy liability.

How much does cyber insurance cost for a law firm?

As 2026 industry estimates, firms under about 25 attorneys commonly pay $1,500-$7,500 per year per $1M limit, driven by revenue, practice mix (real estate and trust-heavy practices price higher), security controls, and claims history.

What security controls do cyber carriers require from law firms?

Five have become near-mandatory: multi-factor authentication on email, remote access, and banking; tested offline/immutable backups; email authentication (SPF/DKIM/DMARC) with filtering; documented callback verification for any payment-instruction change; and endpoint detection with a patching cadence. Missing MFA frequently means no quote at all.

Cyber Insurance for Law Firms: Wire Fraud, Ransomware & What Malpractice Won't Cover (2026)

By Tamir Lerner, CA License #6012320 · Law Firm Insurance Pros · Updated August 2026

Quick answer: Law firms are among the most-attacked businesses per employee — they hold wire-instruction authority, privileged files, and settlement funds — and legal malpractice policies largely exclude cyber events. A real law-firm cyber policy covers: breach response (forensics, notification, credit monitoring), funds-transfer fraud and social engineering (the wire-diversion scenario that hits real estate and trust accounting), ransomware/extortion, business interruption, and third-party privacy liability. Small-firm pricing commonly runs $1,500–$7,500/yr per $1M in 2026 — with the application's security questions (MFA, backups, email controls) deciding both price and insurability.

Law firms buy malpractice coverage obsessively and then run trust accounts over email. Attackers noticed years ago: the wire-diversion email that redirects a closing, the ransomware note that locks case files a week before trial. Here's what law-firm cyber coverage actually needs to include in 2026, what it costs, and the five controls carriers now require before they'll quote at all.

Why firms specifically (the attacker's view)

Money moves on your say-so: closings, settlements, trust disbursements — a spoofed partner email is a wire.
The files are leverage: privileged litigation strategy, M&A terms, PII in discovery — ransomware against a firm pressures the firm AND its clients.
Deadlines create payment pressure: statute deadlines and trial calendars make firms fast payers.
Ethics exposure compounds it: ABA Formal Opinions 477R/483 make competent technology security and breach disclosure professional duties — a breach is also a bar problem: ABA cybersecurity resources.

What the policy must include (law-firm edition)

Coverage	The law-firm scenario it pays
Breach response	Forensics, client notification, credit monitoring, PR — discovery databases are PII warehouses
Funds-transfer fraud + social engineering	The diverted closing wire; confirm BOTH your funds and client funds you control are covered, at real sublimits
Ransomware / extortion	Negotiation, payment where lawful, restoration — and lost billable time via business interruption
Third-party privacy liability	Client suits over exposed privileged/PII data
Regulatory / bar defense	State AG privacy actions; some forms extend to disciplinary proceedings arising from the breach

Two boundary notes: your LPL policy may cover a malpractice CLAIM that follows a cyber event (missed deadline because systems were down) but not the event itself — and cyber forms exclude professional services, so the two policies must meet without a gap. Check both sides' exclusions against the wire-fraud scenario specifically: money lost from a TRUST account lands in the seam unless someone endorsed it.

The five controls carriers require in 2026

MFA everywhere — email, VPN, practice management, banking. Non-negotiable; no MFA often means no quote.
Tested, offline/immutable backups — with restoration actually attempted, not assumed.
Email authentication + advanced filtering (SPF/DKIM/DMARC) — the wire-fraud vector runs through email.
Wire verification procedures — documented callback verification on any payment-instruction change; carriers ask and some sublimit social engineering without it.
EDR on endpoints + a patching cadence — increasingly checked by outside-in scans; your quote reflects what scanners see.

What it costs (2026 estimates)

Small firms (under ~25 attorneys): $1,500–$7,500/yr per $1M limit, driven by revenue, practice mix (real estate and trust-heavy practices price higher — the wire exposure), controls, and claims. Mid-size firms scale up with revenue and data volume. Compare that to the median wire-diversion loss — six figures, unrecovered — and cyber sits beside LPL as the second mandatory line, with the same claims-made mechanics (refresher here) — mind retroactive dates when switching carriers, same as prior acts on your LPL.

The bottom line

A law firm's cyber policy is wire-fraud coverage first, ransomware coverage second, and breach response third — buy it in that order of scrutiny, implement the five controls before the application (they're the price of admission now), and make sure the cyber form and the LPL meet at every seam a trust account can fall through.

Would a diverted closing wire be covered - from the trust account?

Law Firm Insurance Pros places cyber built for firms: social engineering at real sublimits including client funds, coordinated seams with your LPL, and applications prepped so the controls questions price in your favor.

Get a free quote
Call (818) 356-8150

General information only, not legal or coverage advice. Class codes, rates, and statutory requirements change and vary by carrier, state, and policy period. Law Firm Insurance Pros is operated by Thrive Risk Management Insurance Solutions, Inc., CA License #6012320. Confirm current requirements with a licensed agent.