Garlick & Markison listed on losttrust leak site

• Ransomware group: losttrust
• Country: United States
• Sector: Professional Services
• Announcement date: September 26, 2023

The listing of Garlick & Markison by losttrust

The boutique law firm Garlick & Markison has been listed on the leak site of the threat group known as losttrust. According to the announcement made on September 26, 2023, the group claims to have conducted an operation against the firm on that same date. This type of activity is common in modern ransomware campaigns, where threat actors utilize leak sites to pressure victims by threatening to release sensitive information if demands are not met.

Ransomware leak sites serve as a public stage for cybercriminals to display their targets. In many instances, these groups employ a double extortion tactic. In this scenario, the attackers do not just encrypt a victim's systems to disrupt operations; they also exfiltrate sensitive data before the encryption occurs. The threat of leaking this stolen information provides the attackers with additional leverage during negotiations, as the reputational and legal damage from a data leak can often exceed the cost of the ransom itself.

Details of the claimed operation

The threat actor known as losttrust has added Garlick & Markison to its leak site as part of a claimed cyberattack. The announcement, which appeared on September 26, 2023, indicates that the group has targeted the firm specifically. While the group has made this public claim, the specific details regarding the nature of the operation remain limited.

Regarding the information allegedly compromised during this incident, the group has not provided any screenshots or detailed information regarding the nature of the allegedly leaked data. The listing names no specific data types or files that were purportedly stolen during the operation.

Organization profile

Garlick & Markison is a boutique law firm specializing in patent portfolio building. The firm maintains a highly technical workforce, as all practitioners at the firm are registered with the U.S. Patent and Trademark Office and possess technical backgrounds in electrical engineering or software arts.

Potential risks and industry implications

This incident may pose a risk of exposure for sensitive patent and intellectual property information belonging to the firm's clients. Given the specialized nature of the firm's work in patent portfolio building, the potential for intellectual property theft is a significant concern. As a law firm, a potential breach could lead to legal consequences regarding client confidentiality and attorney-client privilege.

Furthermore, because the institution is based in the United States, data breach notification requirements under relevant state laws and federal regulations may be triggered. Organizations in the professional services sector must be prepared to navigate complex regulatory landscapes following a security incident. Beyond the immediate legal and regulatory concerns, there are secondary risks to consider. The stolen data could be utilized for identity theft or targeted phishing attacks against the firm or its clients.

To defend against such threats, organizations in the legal and professional services sectors often implement various defensive measures. These include robust encryption for data at rest and in transit, multi-factor authentication (MFA) across all remote access points, and rigorous patch management to close vulnerabilities. Additionally, maintaining comprehensive logs and implementing continuous monitoring can help in detecting unauthorized access more quickly. Because information regarding the losttrust group is limited, organizations should remain vigilant against the evolving tactics used by such threat actors.