Black Basta claims to have breached rosenlegal.com

• Ransomware group: Black Basta
• Country: United States
• Sector: Professional Services
• Announcement date: October 29, 2024

Black Basta claims to have exfiltrated data from rosenlegal.com

The Black Basta ransomware group has listed The Rosen Law Firm on its leak site, claiming to have obtained a significant volume of sensitive information. According to the announcement, the group alleges to have exfiltrated over 500 GB of data belonging to the organization.

Details of the alleged attack

The listing was posted on the group's leak site on October 29, 2024. The Black Basta group claims that the data was obtained following an alleged attack that took place on October 9, 2024. While the group has published the organization's name and the volume of data they claim to possess, no information was provided regarding a ransom demand.

Ransomware leak sites are frequently used by cybercriminal groups to pressure victims into paying ransoms. In many modern ransomware campaigns, threat actors employ a tactic known as double extortion. This method involves not only encrypting an organization's files to disrupt operations but also stealing sensitive data before encryption. The threat actors then threaten to release this stolen information on public leak sites if the ransom is not paid, thereby increasing the pressure on the victim through the threat of reputational damage and regulatory scrutiny.

Claimed data types involved in the breach

The group claims that the stolen data contains a wide variety of sensitive files. According to the listing, the following types of information have been compromised:

• Client personal documents
• Employee personal data
• Financial records
• Accounting data
• Payroll data
• Tax data
• Customer data
• Confidential agreements

About The Rosen Law Firm

The Rosen Law Firm is a law firm specializing in securities fraud and breaches of fiduciary duty. The firm focuses on shareholder rights and class action lawsuits, handling complex financial litigation to recover damages for investors.

Potential impact and industry implications

This alleged breach may pose significant risks of identity theft and targeted phishing attacks for the firm's clients and employees. Given that law firms handle highly sensitive client information, the incident could lead to legal consequences under US state laws and relevant data protection regulations.

The exposure of the firm's financial and legal processes could potentially result in long-term reputational damage and supply chain risks. Because Black Basta is assessed to have ties to Conti, the group may be inclined to utilize double extortion tactics to maximize their leverage over the victim.

For organizations in the professional services sector, particularly law firms, maintaining robust cybersecurity posture is critical. Defensive steps often include implementing multi-factor authentication across all systems, maintaining offline backups of critical data, and conducting regular employee training to recognize phishing attempts. Furthermore, strict access controls and encryption of sensitive client files can help mitigate the impact of a potential data exfiltration event.