Thomas J. Henry Law listed on Akira ransomware leak site

• Ransomware group: Akira
• Country: United States
• Sector: Professional Services
• Announcement date: January 10, 2025

Akira ransomware group claims data breach at Thomas J. Henry Law

The Akira ransomware group has claimed responsibility for a cyberattack targeting Thomas J. Henry Law. According to an announcement made on the group's leak site on January 10, 2025, the threat actors claim to have successfully exfiltrated a significant volume of sensitive information from the organization's network.

The group asserts that they have obtained approximately 4 TB of private corporate documents. While public information regarding the specific operations and technical methodologies of the Akira group remains limited, they are known to employ double-extortion tactics. In such scenarios, attackers not only encrypt an organization's data to disrupt operations but also steal sensitive information to use as leverage, threatening to publish it online if a ransom is not paid. This method is designed to maximize pressure on the victim organization by threatening reputational damage and legal consequences.

Details of the alleged data exfiltration

The data allegedly stolen by the Akira group is highly sensitive and includes a wide variety of personal and corporate information. Although no screenshots were provided by the attackers to verify the contents of the breach, the group claims to have accessed several categories of confidential files. The alleged data includes:

• Non-disclosure agreements (NDAs)
• Social Security Numbers (SSNs)
• Passports
• Driver licenses
• Medical records
• Medicare documents
• Contact information
• Personnel incident reports

The presence of such diverse data types suggests a deep penetration into the firm's internal systems, potentially reaching both administrative and client-facing databases.

About Thomas J. Henry Law

Thomas J. Henry Law is a major law firm based in Texas. The firm specializes in personal injury claims, product liability, and mass tort litigation. It provides comprehensive legal services, representing clients across a wide range of legal matters.

Risk assessment and implications for the legal sector

The nature of the allegedly leaked data poses a high risk of identity theft and fraud for both the firm's employees and its customers. The exposure of sensitive documents, such as medical records and personal identification documents, could lead to significant legal consequences under HIPAA and relevant US state data protection laws. Such regulatory frameworks are designed to protect patient privacy, and a breach of this magnitude often triggers mandatory reporting requirements and potential litigation.

Furthermore, the exposure of contact information increases the likelihood that customers may be subjected to targeted phishing attacks. In these scenarios, attackers use stolen details to craft convincing fraudulent communications to further exploit the victims. Such breaches can cause lasting damage to a firm's reputation and can create negative impacts on supply chain security, as clients and partners may reconsider their associations with the organization.

For organizations in the professional services sector, particularly law firms handling sensitive client data, maintaining robust security postures is critical. Common defensive strategies often include implementing multi-factor authentication (MFA) across all systems, maintaining rigorous patch management schedules to close vulnerabilities, and conducting regular employee training to recognize social engineering attempts. Additionally, segmenting networks and employing advanced monitoring tools can help detect and mitigate unauthorized data exfiltration attempts before they reach a critical scale.