LockBit 2.0 ransomware group lists noll-law.com on its leak site

• Ransomware group: LockBit 2.0
• Country: United States
• Sector: Professional Services
• Announcement date: April 4, 2022

LockBit 2.0 claims data compromise of noll-law.com

The LockBit 2.0 ransomware group has listed the domain noll-law.com on its leak platform. According to the announcement made on April 4, 2022, the group claims that data belonging to the organization has been compromised. The publication of this announcement suggests that a cyberattack may have been carried out against the organization's networks.

Ransomware attacks often involve a tactic known as double extortion, where threat actors not only encrypt an organization's systems to disrupt operations but also exfiltrate sensitive data. By threatening to release this stolen information on a public leak site, the attackers aim to exert maximum pressure on the victim to pay the ransom. Such leak sites serve as a public gallery for the group's victims, often used to shame organizations into compliance.

Details of the alleged breach

Regarding the specifics of the incident, the group has not provided detailed information concerning the nature of the data allegedly leaked. Furthermore, no screenshots of the stolen files have been provided to support the claim. The listing remains limited to the identification of the target organization and the claim of compromise.

• No specific data types or file counts were identified in the announcement.

About Noll Law

Noll Law is a law firm based in Illinois, United States, specializing in areas such as criminal law and family law.

Impact and security implications

This incident may result in the exposure of the organization's sensitive data. A data breach of this nature could lead to secondary risks for the organization's clients, such as identity theft or targeted phishing attacks. When professional service providers are targeted, the sensitive nature of client-attorney communications makes the potential impact of a breach particularly significant.

LockBit is a Ransomware-as-a-Service (RaaS) group that has been tracked since 2019. This specific record originates from the LockBit 2.0 era following 2021. It is worth noting that the group's infrastructure was disrupted by international operations in February 2024. Depending on the region where the organization operates, legal processes under relevant data protection regulations may be triggered by such an event.

To defend against such threats, organizations in the professional services sector typically focus on robust defensive measures. These include implementing multi-factor authentication (MFA) across all remote access points, maintaining regular and offline backups of critical data, and conducting continuous monitoring of network traffic to detect unauthorized exfiltration. Furthermore, employee training regarding phishing awareness is a critical component in preventing the initial access often used by ransomware groups to infiltrate corporate networks.