Skip to content
OriginalSign in

DataBreachesDissent

Silent Ransom Group hits Fox Rothschild, leaks law firm data

Part of the Luna Moth story · since 7 Apr

Developinglatest 3 hours ago22 articles5 outlets
7 Apr · DataBreaches first28 Jul4 Sep12 OctNowThis article13th of 22
  • Tue 7 Apr, 03:01 UTC. DataBreaches, first report. Jones Day confirms breach after Silent Ransom Group phishing.
  • Fri 10 Apr, 15:07 UTC. DataBreaches. Law firm Orrick hit by SRG hack, data leaked after ransom talks.
  • Mon 13 Apr, 17:21 UTC. DataBreaches. Silent Ransom Group targets US law firms, leaks data from 38+.
  • Wed 27 May, 08:51 UTC. SecurityWeek, its first report on the story. FBI warns Silent Ransom Group targeting US law firms via phishing.
  • Wed 27 May, 13:21 UTC. DataBreaches. FBI Warns of Silent Ransom Group Targeting US Law Firms.
  • Wed 27 May, 21:21 UTC. Dark Reading, its first report on the story. FBI warns Silent Ransom Group targets law firms with IT scams.
  • Fri 29 May, 13:10 UTC. Infosecurity, its first report on the story. Ransomware gang poses as IT staff to hit US law firms.
  • Fri 5 Jun, 18:31 UTC. Security Affairs, its first report on the story. FBI warns that Silent Ransom Group uses IoT devices in attacks.
  • Sun 7 Jun, 19:30 UTC. DataBreaches. Silent Ransom Group spurns $1.8M demand, leaks law firm data.
  • Mon 8 Jun, 10:40 UTC. SecurityWeek. Silent Ransom Group uses fast flux to hit law firms worldwide.
  • Mon 8 Jun, 11:50 UTC. Security Affairs. UNC3753 gang uses vishing and USB drops to steal legal data.
  • Mon 8 Jun, 21:30 UTC. Dark Reading. Silent Ransom Group Targets Law Firms Using Vishing to Steal Data.
  • Mon 29 Jun, 23:06 UTC. DataBreaches. Silent Ransom Group hits Fox Rothschild, leaks law firm data. This article, 13th of 22.
  • Fri 21 Aug, 17:06 UTC. DataBreaches. Troutman Pepper Locke Suffers Second Silent Ransom Attack.
  • Mon 14 Sep, 13:41 UTC. DataBreaches. Ransom Group Claims Greenberg Traurig Breach Exposed 126,000 People.
  • Mon 28 Sep, 17:47 UTC. DataBreaches. Hogan Lovells Faces Repeat Ransomware Attack After $20m Demand.
  • Wed 7 Oct, 22:36 UTC. DataBreaches. Leaked SRG Chats Claim $207 Million in Ransom Payments from Law Firms.
  • Fri 9 Oct, 14:36 UTC. DataBreaches. Researchers question whether the Luna Moth leak really came from Silent Ransom Group.
  • Sat 10 Oct, 15:55 UTC. Security Affairs. Silent Ransom Group Extorted 27 Law Firms Without Using Malware.
  • Sun 11 Oct, 14:01 UTC. DataBreaches. Unprotected MongoDB Backup Exposed Silent Ransom Group Chats.
  • Mon 12 Oct, 15:37 UTC. Infosecurity. Leaked files reveal how Luna Moth scammers trick staff into granting remote access.
  • Thu 12 Nov, 21:30 UTC. Dark Reading. Luna Moth returns to law firms to steal Microsoft tokens.

Fox Rothschild, a prominent law firm, fell victim to a data breach orchestrated by the Silent Ransom Group (SRG), which has been targeting law firms extensively. On May 21, 2023, SRG accessed Fox Rothschild’s network, exfiltrating sensitive data and demanding payment to prevent data leaks. After negotiations failed, SRG leaked the data on May 28, which included confidential files and potentially sensitive personal information like Social Security numbers.

Previous reporting by DataBreaches indicated that SRG has attacked nearly 100 law firms, often employing similar tactics in negotiations: high initial demands, limited negotiation time, and strict adherence to deadlines. The group is known for its effective use of social engineering and targeted attacks, derived from the defunct Conti ransomware group. Law firms are advised to anticipate SRG's intrusion methods and prepare for negotiations if targeted.

How the story developed

All 22 articles
Developinglatest 3 hours ago22 articles5 outlets

22 articles from 5 outlets since 7 Apr. Picked up again on 12 Nov after 4 weeks quiet. This was the 13th report, 84 days after the first.

Now7 Apr3013266173020 Aug71821326First reportDataBreaches · 7 Apr, 03:01This article13th of 22 · day 83Picked up againafter 4 days quiet
  • Tue 7 Apr, 03:01 UTC. DataBreaches, first report. Jones Day confirms breach after Silent Ransom Group phishing.
  • Fri 10 Apr, 15:07 UTC. DataBreaches. Law firm Orrick hit by SRG hack, data leaked after ransom talks.
  • Mon 13 Apr, 17:21 UTC. DataBreaches. Silent Ransom Group targets US law firms, leaks data from 38+.
  • Wed 27 May, 08:51 UTC. SecurityWeek, its first report on the story. FBI warns Silent Ransom Group targeting US law firms via phishing.
  • Wed 27 May, 13:21 UTC. DataBreaches. FBI Warns of Silent Ransom Group Targeting US Law Firms.
  • Wed 27 May, 21:21 UTC. Dark Reading, its first report on the story. FBI warns Silent Ransom Group targets law firms with IT scams.
  • Fri 29 May, 13:10 UTC. Infosecurity, its first report on the story. Ransomware gang poses as IT staff to hit US law firms.
  • Fri 5 Jun, 18:31 UTC. Security Affairs, its first report on the story. FBI warns that Silent Ransom Group uses IoT devices in attacks.
  • Sun 7 Jun, 19:30 UTC. DataBreaches. Silent Ransom Group spurns $1.8M demand, leaks law firm data.
  • Mon 8 Jun, 10:40 UTC. SecurityWeek. Silent Ransom Group uses fast flux to hit law firms worldwide.
  • Mon 8 Jun, 11:50 UTC. Security Affairs. UNC3753 gang uses vishing and USB drops to steal legal data.
  • Mon 8 Jun, 21:30 UTC. Dark Reading. Silent Ransom Group Targets Law Firms Using Vishing to Steal Data.
  • Mon 29 Jun, 23:06 UTC. DataBreaches. Silent Ransom Group hits Fox Rothschild, leaks law firm data. This article, 13th of 22.
  • Fri 21 Aug, 17:06 UTC. DataBreaches. Troutman Pepper Locke Suffers Second Silent Ransom Attack.
  • Mon 14 Sep, 13:41 UTC. DataBreaches. Ransom Group Claims Greenberg Traurig Breach Exposed 126,000 People.
  • Mon 28 Sep, 17:47 UTC. DataBreaches. Hogan Lovells Faces Repeat Ransomware Attack After $20m Demand.
  • Wed 7 Oct, 22:36 UTC. DataBreaches. Leaked SRG Chats Claim $207 Million in Ransom Payments from Law Firms.
  • Fri 9 Oct, 14:36 UTC. DataBreaches. Researchers question whether the Luna Moth leak really came from Silent Ransom Group.
  • Sat 10 Oct, 15:55 UTC. Security Affairs. Silent Ransom Group Extorted 27 Law Firms Without Using Malware.
  • Sun 11 Oct, 14:01 UTC. DataBreaches. Unprotected MongoDB Backup Exposed Silent Ransom Group Chats.
  • Mon 12 Oct, 15:37 UTC. Infosecurity. Leaked files reveal how Luna Moth scammers trick staff into granting remote access.
  • Thu 12 Nov, 21:30 UTC. Dark Reading. Luna Moth returns to law firms to steal Microsoft tokens.
  • No CVE
  • Larger: an outlet’s first report
  • Coverage over time
  • Quiet time, folded
Show all 22 articles as a list
  1. Tue 7 AprDay 01
    1. Jones Day confirms breach after Silent Ransom Group phishing03:01 · DataBreaches · First report

  2. Quiet for 4 days

    Fri 10 AprDay 31
    1. Law firm Orrick hit by SRG hack, data leaked after ransom talks15:07 · DataBreaches · Picked up again

  3. Quiet for 3 days

    Mon 13 AprDay 61
    1. Silent Ransom Group targets US law firms, leaks data from 38+17:21 · DataBreaches · Picked up again

  4. Quiet for 6 weeks

    Wed 27 MayDay 503
    1. FBI warns Silent Ransom Group targeting US law firms via phishing08:51 · SecurityWeek · Picked up again
    2. FBI Warns of Silent Ransom Group Targeting US Law Firms13:21 · DataBreaches
    3. FBI warns Silent Ransom Group targets law firms with IT scams21:21 · Dark Reading

  5. Quiet for 2 days

    Fri 29 MayDay 521
    1. Ransomware gang poses as IT staff to hit US law firms13:10 · Infosecurity

  6. Quiet for 7 days

    Fri 5 JunDay 591
    1. FBI warns that Silent Ransom Group uses IoT devices in attacks18:31 · Security Affairs · Picked up again

  7. Quiet for 2 days

    Sun 7 JunDay 611
    1. Silent Ransom Group spurns $1.8M demand, leaks law firm data19:30 · DataBreaches · Picked up again
  8. Mon 8 JunDay 623
    1. Silent Ransom Group uses fast flux to hit law firms worldwide10:40 · SecurityWeek
    2. UNC3753 gang uses vishing and USB drops to steal legal data11:50 · Security Affairs
    3. Silent Ransom Group Targets Law Firms Using Vishing to Steal Data21:30 · Dark Reading

  9. Quiet for 3 weeks

    Mon 29 JunDay 831
    1. Silent Ransom Group hits Fox Rothschild, leaks law firm data23:06 · DataBreaches · Picked up again · This article, 13th of 22

  10. Quiet for 8 weeks

    Fri 21 AugDay 1361
    1. Troutman Pepper Locke Suffers Second Silent Ransom Attack17:06 · DataBreaches · Picked up again

  11. Quiet for 3 weeks

    Mon 14 SepDay 1601
    1. Ransom Group Claims Greenberg Traurig Breach Exposed 126,000 People13:41 · DataBreaches · Picked up again

  12. Quiet for 2 weeks

    Mon 28 SepDay 1741
    1. Hogan Lovells Faces Repeat Ransomware Attack After $20m Demand17:47 · DataBreaches · Picked up again

  13. Quiet for 9 days

    Wed 7 OctDay 1831
    1. Leaked SRG Chats Claim $207 Million in Ransom Payments from Law Firms22:36 · DataBreaches · Picked up again

  14. Quiet for 2 days

    Fri 9 OctDay 1851
    1. Researchers question whether the Luna Moth leak really came from Silent Ransom Group14:36 · DataBreaches
  15. Sat 10 OctDay 1861
    1. Silent Ransom Group Extorted 27 Law Firms Without Using Malware15:55 · Security Affairs
  16. Sun 11 OctDay 1871
    1. Unprotected MongoDB Backup Exposed Silent Ransom Group Chats14:01 · DataBreaches
  17. Mon 12 OctDay 1881
    1. Leaked files reveal how Luna Moth scammers trick staff into granting remote access15:37 · Infosecurity

  18. Quiet for 4 weeks

    Thu 12 NovDay 2191
    1. Luna Moth returns to law firms to steal Microsoft tokens21:30 · Dark Reading · Picked up again

Sources

CyberSIXTSignal over noise
Updated AboutDevelopersSign in