Wilkinson Rogers listed on Fog ransomware leak site

• Ransomware group: Fog
• Country: Canada
• Sector: Professional Services
• Announcement date: March 11, 2025

The ransomware group known as Fog has listed Wilkinson Rogers on its leak site, claiming to have exfiltrated 57 GB of data from the organization's systems. This announcement, made on March 11, 2025, follows an alleged attack date of March 10, 2025.

Details of the alleged attack

According to the claim made by the Fog group, the breach occurred on March 10, 2025. The group has publicly listed Wilkinson Rogers on its dedicated leak site, asserting that they have successfully obtained a significant volume of information. The group claims that the total size of the data stolen is 57 GB. This type of activity is characteristic of modern ransomware operations, often referred to as double extortion, where attackers not only encrypt an organization's systems but also steal sensitive data to use as leverage during ransom negotiations.

The announcement provided by the group includes specific details regarding the nature of the services provided by the victim organization, noting their involvement in financial reporting and tax advisory services. This context highlights the sensitive nature of the information typically handled by firms in the professional services sector. While the group has published this claim, no information regarding a ransom demand has been provided in the announcement.

Alleged compromised data

The Fog group has specified several categories of information that were allegedly compromised during the incident. The data claimed to be leaked includes a variety of sensitive internal and external documents. The specific types of data allegedly involved include:

• Internal correspondence
• Employee contact information
• Customer contact information
• Confidential contracts and agreements
• Internal financial documents

The presence of such diverse data types—ranging from personal contact details to high-level legal and financial documentation—suggests a broad access level within the organization's digital environment. The disclosure of such information can lead to significant secondary risks for the individuals involved, such as identity theft or targeted phishing attacks.

About Wilkinson Rogers

Wilkinson Rogers is a law firm based in Jamaica. The company provides legal services in various areas, including corporate law, property transactions, and commercial consultancy. The firm's involvement in these specialized legal and financial sectors underscores the potential sensitivity of the data they manage on behalf of their clients.

Risk assessment and organizational implications

This incident may pose a risk of exposure for sensitive customer and employee data held by Wilkinson Rogers. As a Canadian accounting firm, the organization may be subject to data protection regulations such as PIPEDA. The nature of the leaked data could lead to secondary risks, including identity theft and targeted phishing attacks against affected individuals. Furthermore, the disclosure of financial documents may negatively impact the firm's professional reputation.

In the professional services sector, such incidents highlight the critical importance of robust cybersecurity frameworks. Organizations in this sector often handle highly confidential information, making them prime targets for sophisticated threat actors. To mitigate these risks, organizations typically implement defensive measures such as multi-factor authentication, regular security awareness training for employees, and comprehensive data encryption protocols. Additionally, maintaining rigorous access controls and conducting regular audits of network permissions can help limit the potential impact of a breach. Information regarding the Fog group remains limited at this time.