JONES Day has confirmed a limited data breach following a phishing attack by Silent Ransom Group (SRG), which posted the data to its dark web leak site on 30 March. The firm said limited files for 10 clients were obtained and all affected clients were notified. SRG, also known as Luna Moth, Chatty Spider and UNC3753, has targeted law firms since early 2023, with the FBI noting the sensitive nature of legal data.
A screenshot of part of the negotiation between SRG and Jones Day’s representatives suggested a demand of 13,000,000, although there is no indication that Jones Day countered that amount; the final communication warned of data publication if there was no response by 12pm Central time on the following Monday. Reuters reports that the hackers were referring to Greg Castanias, who leads Jones Day’s team before the U.S. Court of Appeals for the Federal Circuit, and Castanias reportedly declined to comment.