Law firms in Australia have improved their cybersecurity in recent years but remain vulnerable to cybercriminals seeking to exploit their valuable data, experts say.

In fact, legal businesses are especially vulnerable, although the extent of the problem is unknown. First, they face the same sort of threats as any other organization—cybercriminals using ransomware to lock up their data and extorting them to get it back or phishing to win access to a system and steal cash.