ALPHV ransomware group lists riggsabney on its leak site

• Ransomware group: ALPHV
• Country: United States
• Sector: Professional Services
• Announcement date: August 3, 2023

ALPHV claims a massive data breach at Riggs Abney

The ALPHV ransomware group has announced that it has successfully targeted the law firm Riggs Abney. According to the threat actor's claims, the breach involves a significant volume of sensitive information. The group asserts that they have exfiltrated 3.8 TB of data, which they claim belongs to the organization. This announcement was made on the group's leak site on August 3, 2023, the same date the group claims the attack occurred.

The threat actor has stated that they have provided the firm's IT department with a three-day window to establish contact. The announcement indicates that if the deadline is not met, confidential data belonging to both the firm and its clients may be published online. This tactic is characteristic of modern ransomware operations, where attackers use the threat of public exposure to pressure victims into paying a ransom.

The scope of the allegedly stolen data

The information provided in the announcement includes screenshots that purportedly show a wide variety of sensitive files. The data allegedly obtained by the ALPHV group spans personal, financial, and legal categories, suggesting a highly intrusive breach of the firm's internal systems. The contents of the stolen data, as claimed by the attackers, include the following:

• Employee personal data
• CVs
• Driver's licenses
• ID cards
• Social security numbers (SSN)
• Financial reports
• Accounting data
• Credit card information
• Loan data
• Legal agreements

The presence of such diverse data types highlights the potential impact of the breach on various stakeholders. The inclusion of identification documents and social security numbers is particularly concerning for identity protection, while the presence of legal agreements and financial reports points toward a breach of professional confidentiality.

About Riggs Abney

Riggs Abney is an established law firm based in Oklahoma, founded in 1972. Through its offices in Tulsa, Oklahoma City, and Colorado, it provides broad-based legal counsel and representation in all aspects of law. As a professional services firm with a long history, the organization handles a wide array of sensitive client matters and legal documentation.

Potential implications and industry risks

The nature of the allegedly leaked data may increase the risk of identity theft and fraud for both employees and clients. For a law firm, the exposure of sensitive information protected by attorney-client privilege could result in serious legal and reputational consequences. Given that the institution is based in the United States, the breach may trigger data breach notification obligations under relevant state laws and federal regulations.

The ALPHV group is known for using double-extortion tactics. In such scenarios, attackers not only encrypt the victim's systems but also steal sensitive data to use as leverage. If the data is published, it can trigger secondary risks, leading to a loss of trust within the legal sector. This type of incident underscores the critical importance of robust cybersecurity frameworks for professional services firms.

To mitigate such risks, organizations in the legal sector often focus on implementing strict access controls, multi-factor authentication, and comprehensive encryption for data at rest and in transit. Regular security audits and employee training are also essential components of a defensive strategy to prevent unauthorized access to sensitive client and corporate information.