Australian law firms are choosing to pay ransoms to cybercriminals rather than deal with the potentially ruinous consequences of data being posted on the internet, according to a data security expert.

Ben Di Marco, of global risk firm WTW, said law firms “tick every box” for hackers and that more than 20 local firms had been targeted.