APT73 ransomware group lists www.gannons.co.uk on its leak site
The threat group APT73 has listed the UK-based law firm www.gannons.co.uk on their leak site, claiming to possess their data.
- Published
- 2 min read
- 2 min read
- Ransomware group: APT73
- Country: United Kingdom
- Sector: Professional Services
- Announcement date: June 14, 2024
The threat group known as APT73 has listed the United Kingdom-based organization gannons.co.uk on their leak site. According to the group's announcement, they claim to have successfully targeted the firm and acquired sensitive information belonging to the organization.
The alleged attack and claims by APT73
On June 14, 2024, the threat actor identified as APT73 posted an announcement on their leak site regarding gannons.co.uk. The group claims to have gained unauthorized access to the firm's internal systems. Following this access, the group asserts that they were able to exfiltrate specific data from the organization's environment.
In their announcement, the group provided visual evidence to support their claims. This includes screenshots that display snippets of contractual text and technical invoice details pertaining to the firm's infrastructure. These visual samples are intended to demonstrate the validity of their claim regarding the breach of the firm's digital perimeter.
Details of the claimed data exfiltration
The threat group claims to have stolen a total of 2.3 MB of data. The content of this stolen information is described as consisting of various documentation and agreements. The visual evidence provided by the attackers suggests that the leaked material includes specific details regarding the firm's operational infrastructure and various contractual documents.
The types of data identified in the listing include:
- Agreements
- Documentation
- Corporate infrastructure information
While the group has provided samples of the data, they have not specified a ransom demand or a specific number of files involved in the breach.
Implications and potential risks
This alleged data leak poses significant risks to the law firm, particularly concerning the potential exposure of sensitive client data and critical operational information. Because gannons.co.uk is based in the United Kingdom, any confirmed data breach of this nature may fall under the regulatory scope of the UK GDPR. This could potentially subject the organization to rigorous regulatory scrutiny and legal consequences.
If the documents released by APT73 are found to contain privileged client information, the firm could face substantial reputational damage. Furthermore, such a leak increases the risk of secondary targeted attacks against the firm or its clients. It is important to note that information regarding the APT73 group remains limited; consequently, no definitive assessment can be made regarding their specific motivations or their overall operational capabilities.
General context on ransomware leak sites
Ransomware leak sites are a common tool used by modern threat actors to execute