The legal profession has been criticised in a report for failing to confess to cyber attacks. The internal document from Citigroup’s cyberintelligence center warned that law firms’ websites and networks pose a potential vulnerability as “Due to the reluctance of most law firms to publicly discuss cyberintrusions and the lack of data breach reporting requirements in general in the legal industry, it is not possible to determine whether cyberattacks against law firms are on the rise.” The document was obtained by the New York Times which reports that it suggests that law firms can reasonably be expected to be targeted due to the confidential data they handle. There are calls for law firms to do more to tackle the issue of cyber attacks and some want statutory requirements for them to do so.