Scolaro Fetter Grizanti & McGough, P.C. listed on fog ransomware leak site

• Ransomware group: fog
• Country: United States
• Sector: Professional Services
• Announcement date: March 5, 2025

Fog ransomware group claims data breach at Scolaro Fetter Grizanti & McGough, P.C.

The law firm Scolaro Fetter Grizanti & McGough, P.C. has been listed on the leak site of the fog ransomware group. According to the announcement made by the threat actors, the group claims to have obtained 92.5 GB of data belonging to the firm. This incident follows a common pattern in modern cyberattacks where threat actors target high-value professional services to maximize the impact of their extortion attempts.

Details of the alleged attack

The fog group announced the addition of Scolaro Fetter Grizanti & McGough, P.C. to its target list in a post dated March 5, 2025. The threat actor alleges that it gained access to the firm's internal network and exfiltrated various sensitive documents. While the group has made these claims, information about this group remains limited in the public domain, making it difficult to ascertain their specific tactics, techniques, or procedures.

In many such ransomware scenarios, threat actors utilize a method known as double extortion. In this model, attackers do not merely encrypt a victim's files to disrupt operations; they also exfiltrate sensitive data before the encryption phase. This allows them to threaten the victim with the public release of confidential information if a ransom is not paid, thereby increasing the pressure on the organization to comply with their demands.

Alleged exfiltrated data types

According to the information shared in the post, the allegedly exfiltrated data includes a wide variety of sensitive materials. The following items are reported to have been taken by the attackers:

• Customer contact information (addresses, phones, emails)
• Internal financial corporate documents
• Trial preparation documents
• Hearing minutes
• Driver licenses
• Non-disclosure agreements (NDA)

Organization profile

Scolaro Fetter Grizanti & McGough, P.C. is a law firm based in New York. It provides legal advisory services in areas such as corporate law, tax planning, real estate, and estate planning.

Potential impact and industry implications

This alleged leak may pose a significant risk regarding client confidentiality and the exposure of sensitive commercial data held by a law firm. Because the institution is based in the United States, legal proceedings may be triggered under state-level data protection laws and professional liability regulations. The exposure of driver licenses and contact information could lead to identity theft or targeted phishing attacks against the affected individuals.

Furthermore, the leakage of trial documents may compromise the integrity of ongoing legal proceedings and create secondary victimization for clients. For professional service firms, such breaches can lead to a loss of trust from clients and significant regulatory scrutiny. When sensitive documents like non-disclosure agreements or hearing minutes are compromised, the legal standing of various parties involved may be affected.

To defend against such threats, organizations in the professional services sector often implement various defensive steps. These include robust network segmentation to prevent lateral movement, multi-factor authentication (MFA) to secure access to internal networks, and comprehensive encryption for data at rest and in transit. Additionally, continuous monitoring and regular security awareness training are essential to help staff recognize the phishing attempts that often serve as the initial entry point for ransomware groups. The firm may need to evaluate its data breach notification obligations and inform the affected parties as part of its incident response and compliance strategy.