CYBERSECURITY + DIGITAL FORENSICS

Is your law firm ready for a data breach, an email scam or a ransomware attack?

Law firms handle confidential client data every day — and are an increasingly common target of business email compromise (BEC), ransomware and data leaks. Technical assessment, incident response and compliance with Brazil's data protection law (LGPD), delivered by someone who also works in digital forensic expertise.

Talk to the specialist See free assessment
REAL RISKS ALREADY HITTING LAW FIRMS

None of these scenarios is rare

Business email compromise (BEC)

A client or supplier receives an email "from the firm" asking for payment into a different account — and pays.

Ransomware

Years of cases and documents are encrypted overnight, with a ransom demand.

Client data leaks

Exposed confidential data creates legal and reputational exposure — and immediate obligations before Brazil's data protection authority (ANPD).

SIM swap and targeted phishing

Partners and lawyers are targeted by specific scams, aiming at accounts and confidential conversations.

WHAT WE DO FOR YOUR FIRM

Prevention, response and technical evidence

PREVENTION
Security Assessment

Review of the firm's infrastructure, corporate email, backups, access control and password policy, with a vulnerability report and a prioritized action plan.

PREVENTION
LGPD Compliance

Mapping of the sensitive data the firm handles, guidance on legal bases and support in responding to security incidents before the ANPD.

PREVENTION
Digital Hygiene Training

Training for staff to recognize phishing, BEC and social engineering — most attacks begin with a person, not a system.

INCIDENT RESPONSE
Evidence Collection and Preservation

Collection with chain of custody preserved, essential for later use in a police report, lawsuit or negotiation with an insurer.

INCIDENT RESPONSE
Technical-Evidentiary Support

Preliminary technical reports and translation of IT findings into legal language, for use in petitions, notices and responses.

TECHNICAL EVIDENCE
Digital and Document Examination

When an incident involves a forged document, a tampered email or disputed digital authorship, the same team already works in handwriting and digital forensic examination — no need to hire two suppliers.

WHY NANDO PERITO

A single point of contact between IT, technical evidence and the legal world

Most security incidents affecting law firms also become a legal question: who may be held liable, what must be reported, and what can serve as evidence. Having the technical assessment and the expert examination with the same person avoids rework, contradictions between reports and lost time between different suppliers.

  • Cybersecurity certifications (IBM) and over 25 years in IT
  • Hands-on experience in real cybercrime cases
  • Author of the "Hacker do Bem" book series, on defense against cybercrime for legal professionals
  • Handwriting Examiner and Forensic Science Technologist (CRT-RJ), with reports grounded in Article 464 of the Brazilian Code of Civil Procedure
  • Direct service, with no intermediaries, for law firms throughout the State of Rio de Janeiro
FIRST STEP

Free initial assessment, no obligation

A 15 to 20 minute conversation on WhatsApp to understand the size of the firm, what data it handles, and point out the most urgent risks — before any commercial proposal.

Book an assessment on WhatsApp
FREQUENTLY ASKED QUESTIONS

Common questions from law firms and companies

Yes — small firms tend to have fewer security controls and are seen by scammers as an easier target, not a less attractive one. The initial assessment is proportional to the size of the firm: there is no mandatory one-size-fits-all package.

Yes. In these cases the most important thing is to preserve evidence quickly (do not delete anything, do not reinstall systems before collection) and act fast with the bank if a payment was involved. Talk to us before taking any step that could erase important traces.

We work alongside it. The focus here is security assessment, incident response and the technical-evidentiary/expert part — not day-to-day IT maintenance, which can stay with the firm's current provider.

It can, depending on the case. Because collection is done with chain of custody in mind from the start, the material gathered is more likely to be usable as technical evidence, whether in civil, criminal or labor proceedings.
SOS Fraud