The rise in cybersecurity incidents should sound the alarm bells for law firms and legal professionals alike. State bar authorities across the country have reported that lawyers are being specifically targeted by those carrying out cybercrimes, including data breaches and ransomware attacks. These incidents are becoming more prevalent and even harder to detect given the increased use of and reliance on technology by attorneys in connection with the practice of law. This article discusses the obligations that practitioners have when it comes to cybersecurity and practicing law, steps that can be taken to defend against and respond to cybersecurity incidents and potential consequences from the failure to act.