More than £4 million ($5.2 million) was stolen from 23 law firms by cybercriminals in the past three years, the Solicitors Regulation Authority (SRA) has said.

In a conference about cybercrime, the regulator said that during visits to 40 law firms to understand the impact of a cyberattack, they found that firms lost an average of £60,000 (more than $77,000) of client money in every successful attack.

Two firms, it added, had recorded more than 100 cyberattacks apiece in one year, while a total of 31 firms were found to have been successfully targeted by cybercriminals between 2016 and 2019.

The SRA found that during their visits to law firms, 11 of the 40 had "inadequate policies" and 10 more had "inadequate controls" to guard against cyberattacks.

Several top law firms have been impersonated in phishing attacks this year, including Clifford Chance and Linklaters, with the latter affected by scams on three separate occasions.

Lawyers have also reported that cybercriminals will impersonate more senior partners in order to get money out of the firm.

Last month, Bryan Cave Leighton Paisner became the 18th firm to report to the SRA that it had been impersonated by cybercriminals in phishing scams. Firms to have been targeted twice each by scams since the start of 2019 include Mills & Reeve, Watson Farley & Williams and Pennington Manches.