Allan Berger & Associates listed on ALPHV ransomware leak site

• Ransomware group: ALPHV
• Country: United States
• Sector: Professional Services
• Announcement date: February 29, 2024

The US-based law firm Allan Berger & Associates has been listed on the leak site of the ALPHV ransomware group. The threat actor claims that the firm has failed to meet its obligations to its customers and has threatened to leak data. The group has announced the process by stating that it will publish the institution's data.

The alleged attack and claims by ALPHV

According to the announcement made on February 29, 2024, the ALPHV (also known as BlackCat) group has targeted the law firm. The threat actor has explicitly stated that the firm has failed to meet its obligations to its customers, using this as a justification for their actions. The group has announced that they are in the process of publishing the institution's data on their leak site.

Ransomware groups often employ a tactic known as double extortion. In these scenarios, attackers do not merely encrypt an organization's files to disrupt operations; they also exfiltrate sensitive data before the encryption occurs. The threat of leaking this stolen information serves as additional leverage to pressure the victim into paying a ransom. By threatening to release private information publicly, the attackers aim to cause maximum reputational and legal damage to the target organization.

Data involved in the claimed breach

The announcement made by the threat actor claims that several types of sensitive information have been compromised. While the specific volume of data and the exact number of files involved have not been disclosed by the group, the nature of the stolen information is described as highly sensitive. The claims suggest that the breach involves both client-related and internal organizational data.

The specific types of data mentioned in the claim include:

• Tax forms
• Bank checks
• Customer data
• Employee data

The potential exposure of such information poses significant risks to the confidentiality of clients and the security of employees. When sensitive documents like tax forms and bank checks are involved, the risk of identity theft and targeted phishing attacks increases significantly for the individuals whose data has been compromised.

About Allan Berger & Associates

Allan Berger & Associates is a law firm specializing in personal injury law, operating in Louisiana since 1974. The firm represents victims in various legal areas, including auto accidents, medical malpractice, products liability, and offshore injuries.

Security implications and organizational risks

The alleged incident may pose significant risks to client confidentiality and employee security at the law firm. As a law firm operating in the United States, the leaked data could lead to legal consequences under state-level data protection laws and professional ethical standards. The publication of such data may bring secondary risks for victims, including identity theft and targeted phishing attacks.

ALPHV, also known as BlackCat, is a Ransomware-as-a-Service (RaaS) group written in Rust that emerged in late 2021. Although the group's activities were reported to have ceased in March 2024, such leaks may continue to pose long-term security concerns for the affected parties. Even after a group's primary operations are disrupted, the data they have previously stolen remains a persistent threat that can be used for extortion or sold on illicit forums.

For organizations in the professional services sector, particularly law firms handling sensitive client information, maintaining robust cybersecurity defenses is critical. Common defensive steps include implementing multi-factor authentication (MFA), maintaining regular offline backups, and conducting regular security awareness training for employees to recognize phishing attempts. Furthermore, adhering to strict data encryption standards and implementing principle of least privilege (PoLP) access controls can help mitigate the impact of a potential breach. Given the legal and ethical obligations inherent in legal practice, protecting client confidentiality is not only a security requirement but a fundamental professional necessity.