Kevills Solicitors targeted by 8base ransomware group

• Ransomware group: 8base
• Country: United Kingdom
• Sector: Professional Services
• Announcement date: August 24, 2023

8base claims data leak at Kevills Solicitors

The ransomware group known as 8base has claimed responsibility for a data breach involving Kevills Solicitors. According to an announcement posted on the group's leak site on August 24, 2023, the threat actor has allegedly obtained and published documents belonging to the law firm. This incident highlights the ongoing targeting of professional services by sophisticated cybercriminal groups.

The group is employing a double-extortion tactic in this campaign. Double extortion is a common ransomware strategy where attackers do not just encrypt an organization's data to disrupt operations, but also steal sensitive information prior to encryption. The attackers then threaten to publish the stolen data on public leak sites if the ransom is not paid. This method increases the pressure on the victim, as the threat of public exposure can cause significant reputational and legal damage even if the organization can restore its systems from backups.

Details of the alleged data breach

The announcement by 8base includes general information regarding the firm's operations and services, alongside claims regarding the stolen information. Based on the information provided by the threat actor, the leaked data is purported to include a wide variety of sensitive documents. The screenshot associated with the claim indicates that the following types of files have been compromised:

• Invoices
• Receipts
• Accounting documents
• Personal data
• Certificates
• Employment contracts
• Confidentiality agreements
• Client files

While the group has listed these categories, no specific information was provided regarding the total size of the data stolen or the exact number of files involved. Additionally, there was no mention of a specific ransom demand in the announcement.

About Kevills Solicitors

Kevills Solicitors is a law firm based in Chorley, United Kingdom. The firm provides legal advice services to a diverse range of clients, including families, businesses, and individuals. Operating with a partner-led structure, the firm emphasizes an ethical approach and a service model that is largely driven by personal recommendations.

Risk assessment and industry implications

This incident may pose a significant risk due to the exposure of sensitive client information held by law firms. Because the firm is based in the United Kingdom, the breach could lead to legal sanctions and administrative fines under the UK GDPR. The publication of client files and confidentiality agreements may result in reputational damage and increase secondary risks such as identity theft and targeted phishing for third parties.

The 8base group, which has been active since 2022, is known to utilize Phobos-variant encryptors and adopt double-extortion tactics. This combination of encryption and data exfiltration makes them a persistent threat to organizations handling sensitive documentation. In such incidents, the affected organization may be required to fulfill data breach notification obligations and inform the affected parties.

For organizations in the professional services sector, maintaining robust security postures is critical. This includes implementing multi-factor authentication, maintaining offline backups, and conducting regular security awareness training to prevent initial access. Furthermore, because these firms handle highly sensitive personal and legal data, strict adherence to data protection regulations is essential to mitigate the legal and reputational consequences of a potential breach.