lockbit2 attacks incegd

Incident Date:

April 22, 2022

World map

Overview

Title

lockbit2 attacks incegd

Victim

incegd

Attacker

Lockbit2

Location

London, United Kingdom

London, United Kingdom

First Reported

April 22, 2022

Ince & Co Hit by Lockbit2 Ransomware Attack

Ince & Co, a UK-based law firm, has been targeted by the ransomware group Lockbit2, as reported on their dark web leak site. The attack on Incegd.com, which operates in the Law Firms & Legal Services sector, has disrupted the firm's IT systems, causing problems with emails, invoicing, and Wi-Fi connectivity.

Ince & Co, which was previously known as Ince Gordon Dadds LLP, was acquired by Gordon Dadds Group LLP in 2019 and rebranded as The Ince Group. The firm has a history of offering legal services, accounting, financial services, consulting, and pensions advice. Ince & Co has a significant presence in the UK, with 21 offices and over 700 employees worldwide.

The ransomware attack on Ince & Co is not the first incident of its kind in the legal sector. In 2017, DLA Piper's communication network was crippled for over two days by a cyber gang, and in 2020, a media law firm's celebrity client files were auctioned by a ransomware group. These incidents underscore the vulnerability of law firms to cyber attacks, which can disrupt operations and potentially expose sensitive client data.

Ince & Co has advised on cyber security and offers a "Cyber Security Assessment" to identify vulnerabilities in clients' networks. Despite this, the firm has been affected by the ransomware attack, highlighting the need for continuous vigilance and robust cyber security measures.

The Lockbit2 ransomware group has claimed responsibility for the attack, but the extent of the damage and the ransom demanded are not specified in the available information. The attack on Ince & Co serves as a reminder of the ongoing threat posed by ransomware groups to businesses across sectors, emphasizing the importance of proactive cyber security measures and incident response planning.

Sources

Recent Ransomware Attacks

The Recent Ransomware Attacks (RRA) site acts as a watchtower, providing you with near real-time ransomware tracking of attacks, groups and their victims. Given threat actors’ overarching, lucrative success so far, ransomware attacks have become the most ubiquitous, and financially and informationally impactful cyber threat to businesses and organizations today.

The site’s data is generated based on hosting choices of real-world threat actors, and a handful of other trackers. While sanitization efforts have been taken, we cannot guarantee 100% accuracy of the data. Attack updates will be made as source data is reported by reputable sources. By viewing, accessing, or using RRA you acknowledge you are doing so at your own risk.