US law firm Campbell hit by a ransomware attack
The company has many Fortune 500 companies as clients, including Boeing, British Airways, Exxon and Pfizer
Campbell Conroy & O'Neil, P.C. (Campbell), a US law firm with scores of Fortune 500 companies as clients, has admitted to a data breach on its network.
The attack happened in February, but the law firm has only just made the incident public. In a statement, the law firm said it became aware of unusual activity on its network and launched an investigation that revealed ransomware impacted its network.
Campbell collaborated with investigators to determine the full nature and scope of the event.
The firm’s client list includes many big-name companies worldwide, including Boeing, British Airways, Exxon, Pfizer, and Home Depot.
The law firm couldn’t confirm if hackers accessed or viewed any specific information relating to individuals. However, it determined the information present in the infected system included names, dates of birth, driver's license numbers, state identification numbers, financial account information, Social Security numbers, passport numbers, payment card information, and more.
As part of its commitment to the privacy of personal information in its care, Campbell said it would be “reviewing our existing policies and procedures and are working to implement additional safeguards to further secure our information systems.”
“As an added precaution, we are also offering twenty-four (24) months of complimentary access to credit monitoring, fraud consultation, and identity theft restoration services to individuals whose Social Security numbers or the equivalent were accessible as a result of this event,” the firm said.
RELATED RESOURCE
Security awareness training strategies for account takeover protection
Why you need an inside-the-perimeter strategy for internal threats
Skurio CEO Jeremy Hendy told IT Pro that it’s important for Campbell Conroy & O’Neil, P.C to proactively monitor the dark web and other underground forums to see if their data is being leaked, marketed, or sold online.
“Being first to know that their data is out there gives them time to investigate the incident and know if the ransomware group has exposed the data,” he said. “Behind the scenes, we strongly encourage any businesses suffering a breach to automatically react on the assumption sensitive data could be involved. Even if the data is not immediately shared or sold, it may surface long after the original breach occurred, resulting in difficult questions for the business to answer.”
-
Ransomware cartels are fragmenting into volatile splinter groups, warns Met Police cyber chiefNews Commoditized "cyber crime bazaars" and AI data mining are forcing law enforcement to rewrite its playbook
-
New ransomware threat group, The Gentlemen, has become one of the most active ransomware operators, accounting for 10% of all attacksNews NTT researchers warn that the RaaS group is leveraging SystemBC malware to establish covert tunnelling, evade detection, and support rapid lateral movement across enterprise environments
-
Instructure chose to a pay ransom following the Canvas cyber attack – research shows more than half of security leaders would follow suitAnalysis Opting to pay ransoms creates huge risks for enterprises – you’re relying on the word of criminals
-
Ransomware negotiator sentenced for role in major cyber crime groupNews Deniss Zolotarjovs was a key player in a group associated with Conti
-
Threat actors ditch ‘spray and pray’ attacks in shift to targeted exploitationNews A dip in ransomware volumes points to a more targeted approach focused on vulnerability exploitation
-
Security leaders overconfident about ransomware recovery
News Few manage to recover all their data, and many experience business disruption
-
German authorities want your help finding the hackers behind GandCrab and REvilNews Daniil Maksimovich Shchukin and Anatoly Sergeevitsch Kravchuk are believed to have made millions from ransomware as a service schemes
-
The rise of teen hackers ‘makes for a good headline’, but cyber crime activities peak later in life
News With family responsibilities and mortgages to pay, it's not teenagers dishing out malware or carrying out cyber extortion
