Cybercrime, a burgeoning menace, is seeping into the realm of legal professionals, making conveyancing attorneys increasingly susceptible to cyber threats. The convergence of substantial sums of money in property transactions and the escalating use of electronic communications in sensitive dealings heighten the vulnerability of legal practitioners. A recent High Court case, Fourie v Van der Spuy and De Jongh Inc., underscores the urgent need for legal professionals to acknowledge and combat cyber threats.

The High Court Case: A Wake-Up Call
In the Fourie case, the client engaged Van der Spuy and De Jongh Inc. as conveyancers in a property transaction, instructing them to hold approximately four million rand in an investment account. The situation took a dire turn when an attorney at the firm received an email, seemingly from Fourie, with new banking details. The attorney, without verification, proceeded to transfer funds as per the email’s instructions.

During a subsequent telephonic conversation between the attorney and Fourie, it became evident that the emails were hacked, and the transfer requests were unauthorized. The firm had unwittingly paid the funds to an unknown hacker, leading to a substantial loss for the client.

Court Ruling: Negligence in the Face of Cyber Threats
The High Court scrutinized the conduct of the conveyancing attorney, emphasizing that negligence was evident. Despite the client’s email account being hacked, the court held that the attorney failed to exercise the required skill, knowledge, and diligence expected of a practicing attorney. The court asserted that the cybercrime could have been prevented if the attorney had verified the provided banking details. Firms were explicitly warned not to accept changes to client banking details without direct confirmation.

The judgement reiterates the court’s lack of sympathy towards practitioners who neglect adequate risk management against cyber threats. The attorney’s negligence, irrespective of whose email account was hacked, resulted in the firm being held liable for the client’s loss, along with interest and costs.

Practical Steps: Guarding Against Cyber Threats
The court’s stance underscores the need for legal practitioners to implement robust internal policies to verify any changes to client banking details. Suggestions include initiating a phone call to the client, documenting the conversation, and confirming it in writing. Uniform and formal internal policies are crucial to mitigate the risks associated with cybercrime.

Insurance Considerations: The LPIIF Exclusion Clause
Legal practitioners should be aware that damages arising from cybercrime are excluded from coverage by the Legal Practitioners Insurance Indemnity Fund (LPIIF). It is imperative for practitioners and brokers to meticulously review their top-up policies to ensure adequate coverage against damages stemming from cyber threats.

The Rising Tide of Cyber Threats
The landscape of cyber threats is evolving, with online criminals becoming increasingly sophisticated in their schemes. It is not only legal professionals who face these challenges; professionals across various domains must adopt robust pre-emptive measures to counteract the ever-growing schemes engineered by cybercriminals.

Combrink Nel and Associates stand as your trusted partners in navigating the legal intricacies of cyber threats. The recent High Court case serves as a stark reminder that the legal profession must be proactive in adopting measures to protect clients and uphold the integrity of transactions in the face of escalating cyber threats.

Combrink Nel and Associates – Your Trusted Partners in Navigating Legal Pathways