ALPHV ransomware group lists FULL LEAK! Busse & Busee, PC Attorneys at Law on its leak site

• Ransomware group: ALPHV
• Country: United States
• Sector: Professional Services
• Announcement date: January 23, 2024

ALPHV claims to have leaked data from Busse & Busee, PC Attorneys at Law

The ransomware group known as ALPHV has posted an announcement on its leak site claiming to have exfiltrated a significant amount of data belonging to the law firm Busse & Busee, PC Attorneys at Law. According to the claim made by the threat actors, the data breach occurred around January 19, 2024, and the announcement was subsequently posted on the group's leak site on January 23, 2024.

The group alleges that they successfully compromised the BBG-FP01 file server. From this specific server, the threat actors claim to have stolen a total of 637,873 files. The total volume of the data claimed to be stolen is approximately 280 GB. While the group has published this information, no specific ransom demand has been disclosed in the public announcement.

Details of the alleged data exfiltration

The contents of the alleged leak are highly sensitive, given the nature of the targeted organization. The ALPHV group claims that the stolen information includes a wide variety of legal and personal documentation. Based on the information provided by the attackers, the leaked data is said to include the following types of information:

• Legal case files
• Property records
• Deeds
• Confidential agreements
• Passports
• Client database
• Driver's licenses
• Death certificates

The presence of such documents, including screenshots of Illinois state driver's licenses and death certificates, highlights the potential severity of the exposure. The group has stated that payment is requested for the removal of personal data belonging to both employees and clients of the firm.

About Busse & Busee, PC Attorneys at Law

Busse & Busee, PC is a law firm based in Chicago, United States. The firm provides legal consulting and representation services across various legal matters.

Analysis and implications of the breach

The alleged leak of data from a law firm presents significant risks regarding client confidentiality and attorney-client privilege. Because the institution is based in the United States, this breach may lead to legal consequences under state-level data protection laws and regulatory bodies. The exposure of highly sensitive documents, such as passports and driver's licenses, significantly increases the likelihood of identity theft for the affected individuals.

The ALPHV group is a known entity that utilizes malware developed in the Rust programming language. The group is also known for employing the double extortion method. In a double extortion scheme, attackers do not just encrypt an organization's data to disrupt operations; they also steal sensitive information and threaten to leak it publicly unless a ransom is paid. This tactic places immense pressure on organizations, as even if they can restore systems from backups, they still face the threat of data exposure and the resulting reputational and legal damage.

This type of situation can lead to the institution and its clients being more vulnerable to targeted phishing attacks, as the stolen information can be used to craft highly convincing fraudulent communications. Organizations in the professional services sector can take several defensive steps to mitigate such risks, including implementing robust multi-factor authentication, maintaining strict access controls on file servers, conducting regular security awareness training for employees, and ensuring comprehensive encryption for data both at rest and in transit.