McCormick & Priore data allegedly leaked by interlock group

• Ransomware group: interlock
• Country: United States
• Sector: Professional Services
• Announcement date: December 26, 2024

The interlock ransomware group has recently listed data on its leak site that it claims belongs to the law firm McCormick & Priore. According to the announcement made on December 26, 2024, the group asserts that they have successfully obtained sensitive information belonging to the organization. This development follows a period during which the data was allegedly made accessible to the threat actors.

The claimed attack and event details

The interlock group has posted an announcement on its dedicated leak site, claiming responsibility for a data breach involving McCormick & Priore. The group alleges that the unauthorized access to the firm's systems occurred during November 2024. While the group has made these claims publicly, they have not provided any screenshots to support the validity of the breach at this time.

Ransomware groups often utilize leak sites as a tool for double extortion. In such scenarios, attackers not only encrypt an organization's internal systems to disrupt operations but also threaten to release stolen data to pressure the victim into paying a ransom. By publishing claims of a breach, these groups aim to damage the reputation of the target organization and create immense pressure through the threat of public exposure of sensitive information.

Data allegedly involved in the breach

The announcement from the interlock group specifies that several types of sensitive information have been targeted. While the specific volume of the data and the exact number of files involved remain unknown, the group claims to have obtained critical digital assets from the firm. The types of data allegedly compromised include:

• SQL databases
• Confidential employee data
• Confidential client data

The presence of SQL databases in a leak typically indicates that the attackers have gained access to structured data repositories, which often contain the core information used by an organization to manage its daily operations and client relationships. The lack of specific details regarding the file count or the total size of the data means the full scope of the potential exposure cannot yet be determined.

About McCormick & Priore

McCormick & Priore is a professional services firm operating within the legal sector. The firm specializes in defense litigation and is known for providing clients with in-depth legal expertise alongside a personalized approach to service. Given the nature of their work, the firm handles sensitive information that is subject to strict confidentiality requirements.

Potential implications and industry risks

This incident may pose a significant risk of exposing sensitive information belonging to the firm's clients and employees. Because McCormick & Priore operates as a law firm, the leaked data could lead to complex legal complications regarding client confidentiality and attorney-client privilege. Such breaches can undermine the fundamental trust required in legal representation and may result in significant professional liability.

Furthermore, since the entity is based in the United States, the incident may trigger legal processes under state-level data breach notification laws and other relevant regulations. Beyond the immediate legal challenges, there is a distinct possibility that the leaked data could be utilized by malicious actors for identity theft or to conduct highly targeted phishing attacks against the individuals involved.

In the professional services sector, organizations often face similar risks. To defend against such threats, it is common practice for firms to implement robust security measures, such as multi-factor authentication, end-to-end encryption for sensitive data, and rigorous access controls for databases. Regular security audits and employee training regarding phishing awareness are also standard defensive steps used to mitigate the risk of unauthorized access. At this time, public information regarding the specific methods and capabilities of the interlock group remains limited.