Matouk Bassiouny listed on raworld leak site
Cairo-based law firm Matouk Bassiouny has been listed on a leak site by the threat group raworld. The group claims to have obtained 300 GB of data from the firm.
- Published
- 2 min read
- 2 min read
- Ransomware group: raworld
- Country: Egypt
- Sector: Professional Services
- Announcement date: October 25, 2024
Law firm Matouk Bassiouny targeted by raworld
The Cairo-based law firm Matouk Bassiouny has been listed on a ransomware leak site by the threat actor known as raworld. According to the announcement made by the group, the firm has been targeted in a data breach, with the attackers claiming to have obtained a significant volume of sensitive information.
The threat group raworld posted the listing on October 25, 2024, claiming that they have successfully accessed the firm's internal data. The group has threatened to release a dataset totaling 300 GB. While the group has made these claims, public information regarding the specific methods, motivations, or technical background of the raworld group remains limited.
Claimed data contents and scope
The data allegedly exfiltrated by the attackers includes a wide variety of sensitive documents and personal information. The 300 GB dataset, as claimed by the threat group, reportedly contains the following types of information:
- Customer information
- Business contracts
- Contract documents
- Bank statements
- Accounting records
- Employment & social insurance records
- Consortium project files
- Passport copies
The inclusion of such diverse data types suggests a broad access to the firm's operational and client-related files.
About Matouk Bassiouny
Matouk Bassiouny is a prominent law firm based in Cairo, Egypt. The firm specializes in several key areas of legal practice, including arbitration, corporate law, and dispute resolution. It provides a range of legal services to a diverse clientele, including multinational corporations and various local businesses.
Potential impact and security implications
This alleged breach may pose significant risks to client confidentiality and sensitive corporate data, given the legal nature of the firm's operations. The exposure of highly sensitive documents, such as passports and bank statements, could potentially lead to identity theft for the affected individuals. Furthermore, an incident of this nature within the legal sector may undermine attorney-client privilege and lead to significant reputational damage for the institution.
Beyond the immediate privacy concerns, the leaked data could potentially be utilized by malicious actors for secondary attacks or targeted phishing campaigns. In such scenarios, attackers often use stolen information to craft highly convincing fraudulent communications to further exploit victims or the organization itself.
In general, ransomware groups often employ a