Kraken ransomware group lists www.skcounsel.com on its leak site

• Ransomware group: Kraken
• Country: United States
• Sector: Professional Services
• Announcement date: June 28, 2025

The Kraken ransomware group has listed the Chicago-based law firm Scott & Kraus, LLC on its dedicated leak site. According to the announcement made on June 28, 2025, the threat actor claims to have gained unauthorized access to the organization's networks. This development highlights the ongoing risks faced by professional services firms by sophisticated threat actors.

The claimed attack and event details

The threat actor known as Kraken added the entity associated with the domain skcounsel.com to its leak site on June 28, 2025. Through this announcement, the group identified the target as a law firm specializing in commercial finance. The threat actor claims to have successfully gained access to the firm's networks as far back as February 18, 2025.

Information regarding the specific identity, methods, and motivations of the Kraken group remains limited in the public domain. Ransomware leak sites are platforms used by cybercriminals to pressure victims by threatening to publish sensitive information. These sites serve as a public gallery of victims, often used to demonstrate the success of an intrusion and to demand payment in exchange for not releasing stolen data.

Data involved in the incident

Despite the listing on the leak site, the threat actor has not provided specific details or sample files regarding the nature of the allegedly leaked data. The announcement does not include information regarding the total volume of data or the specific number of files involved. Consequently, the listing names no specific data types.

In many modern ransomware campaigns, threat actors employ a tactic known as double extortion. In this scenario, the attackers do not just encrypt the victim's systems to disrupt operations; they also exfiltrate sensitive data before the encryption process begins. The threat of leaking this stolen information on a public site adds a layer of psychological and reputational pressure on the organization, as the impact extends far beyond mere operational downtime.

Organization profile

Scott & Kraus, LLC is a boutique law firm based in Chicago that specializes in commercial finance.

Potential impact and sector risks

The potential implications of a data breach for a law firm are significant due to the sensitive nature of the client information they handle. A breach of this nature may lead to a violation of client confidentiality, which is a cornerstone of legal practice. Because the organization is based in the United States, the incident may trigger notification obligations under various state laws and federal regulations.

The secondary risks associated with such an exposure are multifaceted. There is a possibility that any leaked data could be utilized by malicious actors for identity theft or for conducting highly targeted phishing attacks against the firm or its clients. Furthermore, the exposure of trade secrets belonging to the firm's clients could create negative impacts across the broader supply chain.

For organizations operating within the professional services sector, maintaining robust cybersecurity postures is essential. Common defensive steps include implementing multi-factor authentication, maintaining rigorous patch management schedules, and conducting regular employee awareness training to recognize social engineering attempts. Additionally, maintaining offline, immutable backups and implementing network segmentation can help mitigate the impact of an intrusion. As seen in this case, the pressure on an organization can increase significantly if a double-extortion tactic is employed, making proactive defense and comprehensive incident response planning vital for modern enterprises.