Jones & Mayer listed by Hunters group following alleged data exfiltration

• Ransomware group: Hunters
• Country: United States
• Sector: Professional Services
• Announcement date: November 23, 2024

Hunters group claims data exfiltration at Jones & Mayer

The threat actor known as Hunters International has officially listed the California-based law firm Jones & Mayer on its leak site. According to the announcement made on November 23, 2024, the group claims to have successfully exfiltrated a significant volume of data belonging to the organization. This development follows a pattern often seen in modern cyberattacks where data is targeted for extortion purposes.

The group's announcement indicates that the incident involved a data exfiltration event rather than a traditional ransomware encryption attack. The threat actor explicitly stated that no encryption was performed on the institution's systems during this specific event. Instead, the focus of the attack appears to have been the unauthorized removal of sensitive information from the organization's environment.

Details of the alleged data breach

Based on the claims provided by Hunters International, the volume of information stolen is substantial. The group asserts that they have obtained a massive amount of data, which they claim is comprised of a specific number of individual files. While the group has posted the incident on their leak site, they have not provided any specific details regarding the nature or the specific types of data contained within the stolen files.

Claimed data metrics

• Total data size: 2.8 TB
• Total file count: 507,875 files

The screenshot associated with the leak site confirms these metrics, highlighting the scale of the alleged breach. However, as noted, the specific contents of these files remain unknown to the public at this time, as no detailed breakdown of the data types was provided by the attackers.

About Jones & Mayer

Jones & Mayer is a professional services organization operating within the legal sector. The firm is based in California, United States, and maintains a specialized focus on several critical areas of law. Their expertise includes public law and municipal law, and they serve as legal counsel for various law enforcement agencies. Given their role in providing legal services to public and law enforcement entities, the integrity of their data is of significant importance.

Potential implications and security considerations

The claims made by the Hunters International group could have serious consequences for Jones & Mayer. Such an incident may negatively impact the institution's operational continuity and its professional reputation. Because the organization is a US-based entity, a confirmed data breach could potentially trigger complex legal processes under both state-level privacy laws and federal regulations.

Furthermore, depending on the actual content of the exfiltrated data, secondary risks may emerge. These include the possibility of identity theft or the launch of targeted phishing attacks directed at the firm's employees or its clients. The group's activities are often assessed as having links to the Hive ransomware, suggesting that these types of leaks may be conducted using double-extortion tactics. In such scenarios, attackers steal data and then threaten to release it to pressure the victim into paying a ransom.

For organizations in the professional services sector, especially those handling sensitive legal and municipal data, this event highlights the necessity of robust security postures. Organizations often need to review their data security protocols and ensure they are prepared to notify affected parties in the event of a breach. Common defensive measures include implementing strict access controls, maintaining comprehensive logging to detect exfiltration, and ensuring that data is encrypted both at rest and in transit to mitigate the impact of unauthorized access.