SILENT Ransom Group (SRG) says it accessed New York-based law firm Greenberg Traurig on 13 August after compromising a corporate iPad and downloading an employee’s data. The group claimed five people were infected and that it remained undetected until 26 August, when the firm’s IT team isolated an infected computer. Greenberg Traurig instead said the breach occurred on 26 August, describing it as unauthorised access to a limited number of documents.
The firm said it investigated with third-party cybersecurity experts, contained the incident, contacted law enforcement and notified a small number of affected clients. The account of the intrusion is based largely on SRG’s statements, which DataBreaches.net said it could not independently verify.
Analysis of the leaked material identified approximately 126,000 unique individuals and Social Security numbers, although the figure may be an underestimate. The files reportedly included names, contact details, dates of birth and telephone numbers, as well as employment information in some cases. Other exposed material included internal documents, tax and financial records, medical information and a passport copy.
A draft notification submitted to California authorities on 9 September confirmed that names, contact information, dates of birth and Social Security numbers were involved; a Vermont filing identified 10 affected residents. The firm has not publicly clarified who will notify the wider group of individuals. SRG published the data after negotiations over a ransom broke down, and Greenberg Traurig said the documents were posted on the dark web.