(MENAFN) Chinese cyber actors have compromised the computer networks of multiple leading U.S. law firms, including the prestigious Washington-based firm Williams & Connolly, according to a report by The New York Times on Tuesday.

Williams & Connolly informed its clients that its systems had been infiltrated, with hackers potentially accessing some client emails, the report said, citing two individuals familiar with the incident.

The firm, renowned for representing high-profile American politicians such as former Presidents Bill Clinton and George W. Bush, stands as one of the nation’s most influential legal practices.

Sources reveal the FBI’s Washington field office is actively investigating the breach alongside related hacks believed to be conducted by the same Chinese cyber group. This collective is suspected of targeting over a dozen other U.S. law firms and technology companies in recent months.

The FBI has declined to comment publicly on the probe.

In a statement to The New York Times, Williams & Connolly confirmed that a “small number” of its attorneys’ email accounts were compromised through a zero-day exploit—a cyberattack leveraging previously unknown software flaws.

“Importantly, there is no evidence that confidential client data was extracted from any other part of our IT system, including from databases where client files are stored,” the firm stated. “We have taken steps to block the threat actor, and there is now no evidence of any unauthorized traffic on our network.”

Williams & Connolly, known for its vigorous defense of clients in sensitive cases, has engaged cybersecurity firm CrowdStrike and law firm Norton Rose Fulbright to manage the ongoing investigation and response efforts.

CrowdStrike’s initial analysis points to involvement by a nation-state actor connected to a broader campaign targeting U.S. law firms and corporations, according to Williams & Connolly.

Earlier in September, cybersecurity company Mandiant reported that Chinese hackers have been conducting prolonged espionage using zero-day vulnerabilities to harvest intelligence from entities including law firms.

Williams & Connolly has sought to reassure clients, emphasizing that “to its knowledge, the hackers do not intend to sell or publicly release any of the information obtained during the breach.”

MENAFN08102025000045017169ID1110167272