Campbell Conroy & O'Neil, P.C. (Campbell), a US law firm with scores of Fortune 500 companies as clients, has admitted to a data breach on its network.
The attack happened in February, but the law firm has only just made the incident public. In a statement, the law firm said it became aware of unusual activity on its network and launched an investigation that revealed ransomware impacted its network.
Campbell collaborated with investigators to determine the full nature and scope of the event.
The firm’s client list includes many big-name companies worldwide, including Boeing, British Airways, Exxon, Pfizer, and Home Depot.
The law firm couldn’t confirm if hackers accessed or viewed any specific information relating to individuals. However, it determined the information present in the infected system included names, dates of birth, driver's license numbers, state identification numbers, financial account information, Social Security numbers, passport numbers, payment card information, and more.
As part of its commitment to the privacy of personal information in its care, Campbell said it would be “reviewing our existing policies and procedures and are working to implement additional safeguards to further secure our information systems.”
“As an added precaution, we are also offering twenty-four (24) months of complimentary access to credit monitoring, fraud consultation, and identity theft restoration services to individuals whose Social Security numbers or the equivalent were accessible as a result of this event,” the firm said.
RELATED RESOURCE
Security awareness training strategies for account takeover protection
Why you need an inside-the-perimeter strategy for internal threats
Skurio CEO Jeremy Hendy told IT Pro that it’s important for Campbell Conroy & O’Neil, P.C to proactively monitor the dark web and other underground forums to see if their data is being leaked, marketed, or sold online.
“Being first to know that their data is out there gives them time to investigate the incident and know if the ransomware group has exposed the data,” he said. “Behind the scenes, we strongly encourage any businesses suffering a breach to automatically react on the assumption sensitive data could be involved. Even if the data is not immediately shared or sold, it may surface long after the original breach occurred, resulting in difficult questions for the business to answer.”
-
Hounslow Council partners with Amazon Web Services (AWS) to build resilience and transition away from legacy techSpomsored One of the most diverse and fastest-growing boroughs in London has completed a massive cloud migration project. Supported by AWS, it was able to work through any challenges
-
Salesforce targets better data, simpler licensing to spur Agentforce adoptionNews The combination of Agentforce 360, Data 360, and Informatica is more context for enterprise AI than ever before
-
15-year-old revealed as key player in Scattered LAPSUS$ HuntersNews 'Rey' says he's trying to leave Scattered LAPSUS$ Hunters and is prepared to cooperate with law enforcement
-
The Scattered Lapsus$ Hunters group is targeting Zendesk customers – here’s what you need to knowNews The group appears to be infecting support and help-desk personnel with remote access trojans and other forms of malware
-
Impact of Asahi cyber attack laid bare as company confirms 1.5 million customers exposedNews No ransom has been paid, said president and group CEO Atsushi Katsuki, and the company is restoring its systems
-
The US, UK, and Australia just imposed sanctions on a Russian cyber crime group – 'we are exposing their dark networks and going after those responsible'News Media Land offers 'bulletproof' hosting services used for ransomware and DDoS attacks around the world
-
A notorious ransomware group is spreading fake Microsoft Teams ads to snare victimsNews The Rhysida ransomware group is leveraging Trusted Signing from Microsoft to lend plausibility to its activities
-
Volkswagen confirms security ‘incident’ amid ransomware breach claimsNews Volkswagen has confirmed a security "incident" has occurred, but insists no IT systems have been compromised.
-
The number of ransomware groups rockets as new, smaller players emergeNews The good news is that the number of victims remains steady
-
Teens arrested over nursery chain Kido hacknews The ransom attack caused widespread shock when the hackers published children's personal data
