lorenz attacks Ward Hadaway

Incident Date:

March 15, 2022

World map

Overview

Title

lorenz attacks Ward Hadaway

Victim

Ward Hadaway

Attacker

Lorenz

Location

Newcastle, United Kingdom

Newcastle, United Kingdom

First Reported

March 15, 2022

Ward Hadaway Suffers Ransomware Attack

Victim Profile

Ward Hadaway, a prominent law firm in the UK, serves a diverse clientele from its offices in Leeds, Manchester, and Newcastle. Renowned for its proficiency across various sectors such as healthcare, public and third sectors, and private client services, the firm is committed to delivering efficient and effective legal solutions.

Company Size and Vulnerabilities

As a member of the top 100 law firms in the UK, Ward Hadaway manages a substantial amount of sensitive client data, making it an attractive target for cybercriminals. The firm recently fell victim to a ransomware attack by the Lorenz group, which compromised confidential documents and led to a ransom demand of up to $6 million in Bitcoin.

Industry Standout

Ward Hadaway distinguishes itself through its sector expertise and dedication to client engagement, striving to provide value in terms of cost and service quality. The firm's emphasis on strong client relationships is a cornerstone of its business model.

Mitigation Strategies

Although specific mitigation strategies for Ward Hadaway have not been disclosed, it is crucial for law firms to enhance their cybersecurity measures. This includes deploying phishing defenses, securing data backups in multiple locations and offline, and developing a comprehensive disaster recovery plan to reduce IT system downtime in the event of an attack.

The ransomware attack on Ward Hadaway underscores the persistent cyber threats facing the legal sector. With its significant market presence, the firm is an appealing target for attackers aiming to exploit confidential client information. Ward Hadaway has reported the incident to the UK's National Cyber Security Centre and local law enforcement. The outcome of the attack, including any potential ransom payment or data release, remains uncertain.

Sources

Recent Ransomware Attacks

The Recent Ransomware Attacks (RRA) site acts as a watchtower, providing you with near real-time ransomware tracking of attacks, groups and their victims. Given threat actors’ overarching, lucrative success so far, ransomware attacks have become the most ubiquitous, and financially and informationally impactful cyber threat to businesses and organizations today.

The site’s data is generated based on hosting choices of real-world threat actors, and a handful of other trackers. While sanitization efforts have been taken, we cannot guarantee 100% accuracy of the data. Attack updates will be made as source data is reported by reputable sources. By viewing, accessing, or using RRA you acknowledge you are doing so at your own risk.