New Law listed on Hunters ransomware leak site

• Ransomware group: Hunters
• Country: United States
• Sector: Professional Services
• Announcement date: November 7, 2024

The Hunters ransomware group has officially listed the United States-based firm New Law on its dedicated leak site. According to the announcement made by the threat actors, the organization has been targeted in a data exfiltration attack, marking a significant breach for the professional services entity.

Details of the claimed attack

The incident was announced on November 7, 2024. The Hunters group claims to have successfully exfiltrated a substantial amount of information from the organization's internal systems. Notably, the group has stated that the data was not encrypted during this process; instead, the attackers focused on the successful exfiltration of the files from the target's infrastructure.

This approach is characteristic of modern ransomware operations that utilize double extortion tactics. In such scenarios, threat actors focus heavily on stealing sensitive information before or instead of deploying encryption. By threatening to release the stolen data on a public leak site, the group aims to exert maximum pressure on the victim organization to meet their demands.

The group's methodology suggests a specific focus on data theft. It is worth noting that the Hunters group is considered to be derived from Hive code, and their current actions appear to follow a similar approach that prioritizes the exfiltration of data to facilitate extortion.

Data involved in the breach

The Hunters group has provided specific metrics regarding the volume of information they claim to have stolen from New Law. While the specific nature or content of the files has not been detailed by the attackers, the scale of the theft is quantified by the following claims:

• Total claimed data size: 158.5 GB
• Total claimed file count: 43,262 files

Beyond these quantitative metrics, there are no specific details regarding the nature of the allegedly exfiltrated data. The listing does not specify the file formats or the specific types of documents contained within the 43,262 files mentioned by the group.

About New Law

New Law is a law firm based in the United States. The organization provides legal consulting and representation services to its clients across various legal matters. Operating within the professional services sector, the firm handles sensitive matters that often require high levels of confidentiality and data protection.

Potential impact and industry implications

The claims made by the Hunters group may negatively impact the operational continuity and client trust of New Law. Because the firm operates within the professional services and legal sector, the leaked data could potentially contain sensitive client confidentiality and proprietary business information. Such a breach of confidentiality is particularly damaging for legal entities that rely on attorney-client privilege and strict data privacy standards.

This situation may lead to legal repercussions under US state-level data protection laws and industry-specific regulations. When sensitive client information is exposed, organizations often face significant regulatory scrutiny and potential litigation. Furthermore, there is a possibility that the leaked information could be utilized by malicious actors for identity theft or targeted phishing attacks against the firm's clients or employees.

To mitigate such risks, organizations in the professional services sector typically implement various defensive measures. These include robust encryption for data at rest and in transit, strict access controls to limit data exposure, and continuous monitoring of network traffic to detect unauthorized exfiltration. Additionally, maintaining comprehensive incident response plans and conducting regular security awareness training are essential steps for organizations looking to defend against the evolving tactics of ransomware groups like Hunters.