Borah Goldstein Altschuler Nahins & Goidel targeted by Akira ransomware group

• Ransomware group: Akira
• Country: United States
• Sector: Professional Services
• Announcement date: February 1, 2024

Akira ransomware group claims data breach at Borah Goldstein Altschuler Nahins & Goidel

The Akira ransomware group has officially listed the law firm Borah Goldstein Altschuler Nahins & Goidel on its dedicated leak site. According to the claims made by the threat actors, the organization has been compromised, leading to a potential data leak involving sensitive information. This announcement marks a significant incident for the professional services sector, highlighting the ongoing risks faced by legal entities in the current threat landscape.

Details of the alleged attack

The incident was announced on February 1, 2024, with the group claiming the attack occurred on the same day. The Akira ransomware group alleges that they have successfully acquired various documents related to the firm's clients and projects. The group has stated that these documents are intended for publication on their leak site.

While the threat actors have claimed to have access to a variety of files, they have not provided any screenshots to substantiate their claims. Furthermore, specific details regarding the total volume of the data stolen or the exact number of files involved have not been disclosed by the group. The ransom demand associated with this specific incident has also not been made public.

Affected data types

Based on the information provided by the group, the following types of data are claimed to be involved in the breach:

• Personal information

About Borah Goldstein Altschuler Nahins & Goidel

Borah, Goldstein, Altschuler, Nahins & Goidel, P.C. is a law firm based in New York. The firm specializes in residential and commercial real estate law, serving clients within the professional services sector.

Analysis and implications of the incident

This incident may present a significant risk of exposure for sensitive client information. The leakage of data within the legal sector is particularly concerning, as it could potentially lead to identity theft or targeted phishing attacks against the firm's clients. Such attacks often leverage the trust established between a law firm and its clientele to deceive individuals into revealing further sensitive credentials.

Given the tactics employed by the Akira group, which often include double-extortion, the publication of this data could potentially result in significant reputational damage for the firm. Double-extortion is a common ransomware tactic where attackers not only encrypt an organization's data but also steal it, threatening to leak the stolen information on the internet if the ransom is not paid. This adds a layer of pressure on the victim, as the threat of public exposure remains even if systems are restored from backups.

From a regulatory perspective, the firm may face notification obligations under United States laws and relevant state regulations due to the potential exposure of personal information. Organizations operating in the professional services sector should remain vigilant and consider implementing robust defensive measures. These typically include maintaining offline backups, implementing multi-factor authentication, and conducting regular security awareness training to mitigate the risk of such breaches.

Information regarding the Akira group remains limited, making it difficult to determine the full scope of their operational capabilities beyond these claims. As with many ransomware incidents, the situation remains evolving following the initial announcement.