Moses & Singer listed on SilentRansomGroup leak site

• Ransomware group: SilentRansomGroup
• Country: United States
• Sector: Professional Services
• Announcement date: August 2, 2026

SilentRansomGroup claims data compromise at Moses & Singer

The law firm Moses & Singer has been listed on a ransomware leak site by the threat actor known as SilentRansomGroup. According to the announcement made on the group's platform, the organization's data has been compromised. The claim regarding the attack was reportedly made on July 28, 2026, while the official listing appeared on the leak site on August 2, 2026.

Information regarding the SilentRansomGroup remains limited, as there is little publicly available data concerning the group's specific tactics, techniques, or overall operations. Ransomware groups often utilize leak sites to exert pressure on victims through a method known as double extortion. In these scenarios, attackers not only encrypt an organization's systems to disrupt operations but also steal sensitive information, threatening to release it publicly if a ransom is not paid. This tactic aims to maximize leverage by threatening the confidentiality of the victim's data.

Details of the claimed breach

Regarding the specifics of the incident, the threat actor has provided no information regarding the nature of the leaked or threatened data. There is no information available concerning the total size of the data involved or the specific file count. Furthermore, no screenshots have been provided by the group to substantiate their claims of a successful intrusion.

The listing names no specific data types that have been targeted or compromised in this incident.

Potential risks and implications

This situation may pose a significant risk to the firm's client confidentiality and the security of sensitive legal data. Because the target is a law firm, a successful leak could potentially lead to the exposure of client personal information, which may subsequently lead to secondary attacks against the clients themselves.

As the organization operates within the United States, the incident may trigger legal processes under state-level data protection laws and professional responsibility regulations. If data is indeed leaked, the organization and its clients may face risks such as identity theft and targeted phishing attacks. Such attacks often follow a breach, as stolen information provides the necessary context for attackers to craft highly convincing fraudulent communications.

About Moses & Singer

Moses & Singer LLP is a full-service law firm based in New York. The firm provides a wide range of legal services, including corporate transactions, intellectual property, real estate, and litigation.

Defensive considerations for professional services

For organizations operating in the professional services sector, maintaining robust cybersecurity postures is critical due to the sensitive nature of the information they handle. Standard defensive steps often include the implementation of multi-factor authentication (MFA) across all remote access points, regular security awareness training for employees to recognize phishing attempts, and the maintenance of offline, immutable backups to mitigate the impact of encryption-based attacks.

Furthermore, organizations must prioritize data encryption both at rest and in transit to protect client confidentiality. Given the potential for legal and regulatory repercussions following a breach, maintaining a comprehensive incident response plan and ensuring compliance with regional data protection standards are essential components of a modern cybersecurity strategy.