I recently posted a new article on Mobile4Law.com about Client Confidentiality in light of the recent iCloud celebrity image leak that occurred over this past weekend. iCloud is a service offered by Apple that is available on every current iPhone and iPad that allows certain data on your device to be stored in the cloud. Over the weekend, it was reported that about 100 different celebrities had personal images accessed that were being stored using Apple’s iCloud service.
It is suspected that these photos were accessed by malicious users using a brute-force attack to guess passwords of the accounts affected. It appears that the only reason they were successful in the attack is because the accounts were using simple passwords, and that Apple did not lock accounts after a certain number of unsuccessful login attempts.
In the article on Mobile4Law.com, it is explained why this should be a concern to individuals in the legal community that use cloud services for storage of confidential cloud information. I suggest that attorneys take a look at revised Rule 1.6 and the comments to that rule, and determine if they would have committed an ethical violation if confidential client information had been accessed from their account using this same attack.
This post was written by Steven Butler. Steven is a full-time Delaware attorney that limits his practice to Social Security Disability. Along with being a contributor for iPlugDelaware, he is a partner at Linarducci & Butler, PA.