Bregman Berbert Schwartz & Gilday targeted by ALPHV ransomware group

• Ransomware group: ALPHV
• Country: United States
• Sector: Financial Services
• Announcement date: July 26, 2023

ALPHV claims data leak involving Bregman Berbert Schwartz & Gilday

The ALPHV ransomware group has announced on its leak site that data belonging to the law firm Bregman Berbert Schwartz & Gilday is available for download. This announcement, categorized as a data leak, indicates that the group has allegedly compromised the organization's systems. While the group has made these claims publicly, the incident remains an allegation made by the threat actor.

The group appears to have initiated the process regarding the publication of the claimed data during 2023. According to the announcement made on July 26, 2023, the group has targeted this specific legal institution, which is based in the United States. This development follows a pattern of activity observed from the group, which is also known as BlackCat.

Details of the alleged data breach

The information provided by the ALPHV group regarding the scope of the breach is limited to the volume of the data. The group claims that the stolen information amounts to 429 GB. However, the announcement does not provide specific details regarding the nature of the content or the specific types of files that were compromised. The listing names no specific data types.

In many ransomware incidents, threat actors utilize a method known as double extortion. In this scenario, attackers do not only encrypt an organization's files to disrupt operations but also steal sensitive information to use as leverage. By threatening to publish the stolen data on a public leak site, the attackers aim to pressure the victim into paying a ransom to prevent the disclosure of sensitive information. This method is particularly effective against organizations that handle confidential client information.

About Bregman Berbert Schwartz & Gilday

Bregman Berbert Schwartz & Gilday is a law firm based in Maryland. The organization provides a wide range of legal consulting and representation services. Their expertise covers various legal areas, including real estate law, business law, family law, and estate planning.

Potential risks and industry implications

This alleged leak may pose significant risks to the institution's financial and legal operations. Because the organization operates within the legal and professional services sector, the sensitivity of the leaked data may be high, which could lead to long-term operational consequences. The publication of such data could trigger secondary risks for the institution's clients, such as identity theft and targeted phishing attacks.

Given that the organization is a US-based institution, a potential data breach could lead to investigations by relevant state laws and regulatory bodies. Organizations in the financial and legal sectors often face intense scrutiny following a breach due to the highly sensitive nature of the client data they manage, such as personal identifiers, financial records, and legal strategies.

The ALPHV group is known for its Rust-based ransomware operations. While public information about this group remains limited, they have been known to target similar corporate entities in the past. To mitigate such risks, organizations typically focus on robust defensive measures, including multi-factor authentication, regular security awareness training for employees to prevent phishing, and maintaining comprehensive, offline backups to ensure operational continuity in the event of an encryption attack.