What happens if a law firm gets hit with ransomware

This is a practical IT view for Los Angeles area firms — not legal advice.

When ransomware locks the office, filings wait, billable work stops, and client matters sit behind encrypted drives. The difference between a bad week and a worse one is usually whether backups restore and whether someone who knows the firm’s systems answers the phone.

What usually breaks first

• Matter systems and shared drives
• Email and Microsoft 365 access
• Scanners, printers, and the network path to documents
• Remote access for attorneys off-site