DataBreachesDissent
Ransom Group Claims Greenberg Traurig Breach Exposed 126,000 People
Part of the Luna Moth story · since 7 Apr
- Tue 7 Apr, 03:01 UTC. DataBreaches, first report. Jones Day confirms breach after Silent Ransom Group phishing.
- Fri 10 Apr, 15:07 UTC. DataBreaches. Law firm Orrick hit by SRG hack, data leaked after ransom talks.
- Mon 13 Apr, 17:21 UTC. DataBreaches. Silent Ransom Group targets US law firms, leaks data from 38+.
- Wed 27 May, 08:51 UTC. SecurityWeek, its first report on the story. FBI warns Silent Ransom Group targeting US law firms via phishing.
- Wed 27 May, 13:21 UTC. DataBreaches. FBI Warns of Silent Ransom Group Targeting US Law Firms.
- Wed 27 May, 21:21 UTC. Dark Reading, its first report on the story. FBI warns Silent Ransom Group targets law firms with IT scams.
- Fri 29 May, 13:10 UTC. Infosecurity, its first report on the story. Ransomware gang poses as IT staff to hit US law firms.
- Fri 5 Jun, 18:31 UTC. Security Affairs, its first report on the story. FBI warns that Silent Ransom Group uses IoT devices in attacks.
- Sun 7 Jun, 19:30 UTC. DataBreaches. Silent Ransom Group spurns $1.8M demand, leaks law firm data.
- Mon 8 Jun, 10:40 UTC. SecurityWeek. Silent Ransom Group uses fast flux to hit law firms worldwide.
- Mon 8 Jun, 11:50 UTC. Security Affairs. UNC3753 gang uses vishing and USB drops to steal legal data.
- Mon 8 Jun, 21:30 UTC. Dark Reading. Silent Ransom Group Targets Law Firms Using Vishing to Steal Data.
- Mon 29 Jun, 23:06 UTC. DataBreaches. Silent Ransom Group hits Fox Rothschild, leaks law firm data.
- Fri 21 Aug, 17:06 UTC. DataBreaches. Troutman Pepper Locke Suffers Second Silent Ransom Attack.
- Mon 14 Sep, 13:41 UTC. DataBreaches. Ransom Group Claims Greenberg Traurig Breach Exposed 126,000 People. This article, 15th of 21.
- Mon 28 Sep, 17:47 UTC. DataBreaches. Hogan Lovells Faces Repeat Ransomware Attack After $20m Demand.
- Wed 7 Oct, 22:36 UTC. DataBreaches. Leaked SRG Chats Claim $207 Million in Ransom Payments from Law Firms.
- Fri 9 Oct, 14:36 UTC. DataBreaches. Researchers question whether the Luna Moth leak really came from Silent Ransom Group.
- Sat 10 Oct, 15:55 UTC. Security Affairs. Silent Ransom Group Extorted 27 Law Firms Without Using Malware.
- Sun 11 Oct, 14:01 UTC. DataBreaches. Unprotected MongoDB Backup Exposed Silent Ransom Group Chats.
- Mon 12 Oct, 15:37 UTC. Infosecurity. Leaked files reveal how Luna Moth scammers trick staff into granting remote access.
Silent Ransom Group (SRG) has claimed responsibility for an attack on Greenberg Traurig, a New York-headquartered law firm with more than 3,200 lawyers. According to SRG, it first accessed a corporate iPad on 13 August, downloaded an employee’s data and infected five people, remaining undetected until 26 August. The firm says the incident occurred on 26 August, when its IT team detected and contained the threat.
SRG’s account has not been independently verified, including its claim that it watched employees during the intrusion. Negotiations began on 27 August, but after missed payment deadlines SRG published the stolen data. Greenberg Traurig said its systems were not compromised, that only a limited number of documents were accessed, and that it had investigated, engaged external specialists, contained the incident and contacted law enforcement.
DataBreaches.net’s review of the leaked material identified approximately 126,000 individuals and Social Security numbers in litigation-related spreadsheets, although the figure may be an underestimate. Exposed information reportedly included names, dates of birth, addresses, telephone numbers, email addresses and employment details, alongside internal documents. Files also allegedly contained tax and financial records, medical information and a passport belonging to firm personnel.
Greenberg Traurig said it had directly notified a small number of affected clients, but did not explain who would notify individuals. A draft notice submitted to California authorities on 9 September said names, contact details, dates of birth and Social Security numbers were involved; a Vermont filing listed 10 affected residents.
The report also says SRG had targeted the firm previously, while security researchers described attacks focused on individual devices and peripheral data stores rather than whole corporate networks.
How the story developed
21 articles from 5 outlets since 7 Apr. Quiet since 12 Oct. This was the 15th report, 160 days after the first.
- Tue 7 Apr, 03:01 UTC. DataBreaches, first report. Jones Day confirms breach after Silent Ransom Group phishing.
- Fri 10 Apr, 15:07 UTC. DataBreaches. Law firm Orrick hit by SRG hack, data leaked after ransom talks.
- Mon 13 Apr, 17:21 UTC. DataBreaches. Silent Ransom Group targets US law firms, leaks data from 38+.
- Wed 27 May, 08:51 UTC. SecurityWeek, its first report on the story. FBI warns Silent Ransom Group targeting US law firms via phishing.
- Wed 27 May, 13:21 UTC. DataBreaches. FBI Warns of Silent Ransom Group Targeting US Law Firms.
- Wed 27 May, 21:21 UTC. Dark Reading, its first report on the story. FBI warns Silent Ransom Group targets law firms with IT scams.
- Fri 29 May, 13:10 UTC. Infosecurity, its first report on the story. Ransomware gang poses as IT staff to hit US law firms.
- Fri 5 Jun, 18:31 UTC. Security Affairs, its first report on the story. FBI warns that Silent Ransom Group uses IoT devices in attacks.
- Sun 7 Jun, 19:30 UTC. DataBreaches. Silent Ransom Group spurns $1.8M demand, leaks law firm data.
- Mon 8 Jun, 10:40 UTC. SecurityWeek. Silent Ransom Group uses fast flux to hit law firms worldwide.
- Mon 8 Jun, 11:50 UTC. Security Affairs. UNC3753 gang uses vishing and USB drops to steal legal data.
- Mon 8 Jun, 21:30 UTC. Dark Reading. Silent Ransom Group Targets Law Firms Using Vishing to Steal Data.
- Mon 29 Jun, 23:06 UTC. DataBreaches. Silent Ransom Group hits Fox Rothschild, leaks law firm data.
- Fri 21 Aug, 17:06 UTC. DataBreaches. Troutman Pepper Locke Suffers Second Silent Ransom Attack.
- Mon 14 Sep, 13:41 UTC. DataBreaches. Ransom Group Claims Greenberg Traurig Breach Exposed 126,000 People. This article, 15th of 21.
- Mon 28 Sep, 17:47 UTC. DataBreaches. Hogan Lovells Faces Repeat Ransomware Attack After $20m Demand.
- Wed 7 Oct, 22:36 UTC. DataBreaches. Leaked SRG Chats Claim $207 Million in Ransom Payments from Law Firms.
- Fri 9 Oct, 14:36 UTC. DataBreaches. Researchers question whether the Luna Moth leak really came from Silent Ransom Group.
- Sat 10 Oct, 15:55 UTC. Security Affairs. Silent Ransom Group Extorted 27 Law Firms Without Using Malware.
- Sun 11 Oct, 14:01 UTC. DataBreaches. Unprotected MongoDB Backup Exposed Silent Ransom Group Chats.
- Mon 12 Oct, 15:37 UTC. Infosecurity. Leaked files reveal how Luna Moth scammers trick staff into granting remote access.
- No CVE
- Larger: an outlet’s first report
- Coverage over time
- Quiet time, folded
Show all 21 articles as a listHide the list
- Tue 7 AprDay 01
- Jones Day confirms breach after Silent Ransom Group phishing03:01 · DataBreaches · First report
Quiet for 4 days
Fri 10 AprDay 31- Law firm Orrick hit by SRG hack, data leaked after ransom talks15:07 · DataBreaches · Picked up again
Quiet for 3 days
Mon 13 AprDay 61- Silent Ransom Group targets US law firms, leaks data from 38+17:21 · DataBreaches · Picked up again
Quiet for 6 weeks
Wed 27 MayDay 503- FBI warns Silent Ransom Group targeting US law firms via phishing08:51 · SecurityWeek · Picked up again
- FBI Warns of Silent Ransom Group Targeting US Law Firms13:21 · DataBreaches
- FBI warns Silent Ransom Group targets law firms with IT scams21:21 · Dark Reading
Quiet for 2 days
Fri 29 MayDay 521- Ransomware gang poses as IT staff to hit US law firms13:10 · Infosecurity
Quiet for 7 days
Fri 5 JunDay 591- FBI warns that Silent Ransom Group uses IoT devices in attacks18:31 · Security Affairs · Picked up again
Quiet for 2 days
Sun 7 JunDay 611- Silent Ransom Group spurns $1.8M demand, leaks law firm data19:30 · DataBreaches · Picked up again
- Mon 8 JunDay 623
- Silent Ransom Group uses fast flux to hit law firms worldwide10:40 · SecurityWeek
- UNC3753 gang uses vishing and USB drops to steal legal data11:50 · Security Affairs
- Silent Ransom Group Targets Law Firms Using Vishing to Steal Data21:30 · Dark Reading
Quiet for 3 weeks
Mon 29 JunDay 831- Silent Ransom Group hits Fox Rothschild, leaks law firm data23:06 · DataBreaches · Picked up again
Quiet for 8 weeks
Fri 21 AugDay 1361- Troutman Pepper Locke Suffers Second Silent Ransom Attack17:06 · DataBreaches · Picked up again
Quiet for 3 weeks
Mon 14 SepDay 1601- Ransom Group Claims Greenberg Traurig Breach Exposed 126,000 People13:41 · DataBreaches · Picked up again · This article, 15th of 21
Quiet for 2 weeks
Mon 28 SepDay 1741- Hogan Lovells Faces Repeat Ransomware Attack After $20m Demand17:47 · DataBreaches · Picked up again
Quiet for 9 days
Wed 7 OctDay 1831- Leaked SRG Chats Claim $207 Million in Ransom Payments from Law Firms22:36 · DataBreaches · Picked up again
Quiet for 2 days
Fri 9 OctDay 1851- Sat 10 OctDay 1861
- Silent Ransom Group Extorted 27 Law Firms Without Using Malware15:55 · Security Affairs
- Sun 11 OctDay 1871
- Unprotected MongoDB Backup Exposed Silent Ransom Group Chats14:01 · DataBreaches
- Mon 12 OctDay 1881