RansomHub Hits Boston Law Firm Atwood & Cherny in Major Ransomware Attack

Incident Date:

August 15, 2024

World map

Overview

Title

RansomHub Hits Boston Law Firm Atwood & Cherny in Major Ransomware Attack

Victim

Atwood & Cherny

Attacker

Ransomhub

Location

Boston, USA

Massachusetts, USA

First Reported

August 15, 2024

RansomHub Targets Atwood & Cherny in Ransomware Attack

Atwood & Cherny, a prominent Boston-based law firm specializing in family law, has fallen victim to a ransomware attack orchestrated by the cybercriminal group RansomHub. The attackers have threatened to release 100 GB of the firm's sensitive data within the next 3-4 days if their demands are not met.

About Atwood & Cherny

Established in 1984, Atwood & Cherny, P.C. is a distinguished law firm known for its expertise in handling complex family law matters, particularly those involving high net worth individuals and significant assets. The firm offers a wide range of services, including divorce litigation, child custody disputes, alimony and spousal support, and the drafting and negotiation of prenuptial and postnuptial agreements. With multiple office locations in Massachusetts, the firm is well-positioned to serve clients across the region.

Attack Overview

The ransomware attack on Atwood & Cherny was claimed by RansomHub via their dark web leak site. The group has threatened to release 100 GB of the firm's data if their ransom demands are not met within a specified timeframe. The attack has raised significant concerns about the security of sensitive client information, particularly given the firm's focus on high-stakes family law cases.

About RansomHub

RansomHub is a relatively new player in the ransomware landscape, believed to have roots in Russia. Operating as a Ransomware-as-a-Service (RaaS) group, RansomHub's affiliates receive 90% of the ransom money, with the remaining 10% going to the main group. The group has targeted various countries, including the US, Brazil, Indonesia, and Vietnam, and has been known to attack healthcare-related institutions. Their ransomware strains are written in Golang, a language that is becoming increasingly popular among ransomware developers.

Potential Vulnerabilities

Law firms like Atwood & Cherny are particularly vulnerable to ransomware attacks due to the sensitive nature of the data they handle. The firm's focus on high-net-worth clients and complex family law matters makes it an attractive target for cybercriminals seeking to exploit valuable information. The attack on Atwood & Cherny underscores the importance of effective cybersecurity measures in protecting sensitive client data from sophisticated ransomware groups like RansomHub.

Sources

Recent Ransomware Attacks

The Recent Ransomware Attacks (RRA) site acts as a watchtower, providing you with near real-time ransomware tracking of attacks, groups and their victims. Given threat actors’ overarching, lucrative success so far, ransomware attacks have become the most ubiquitous, and financially and informationally impactful cyber threat to businesses and organizations today.

The site’s data is generated based on hosting choices of real-world threat actors, and a handful of other trackers. While sanitization efforts have been taken, we cannot guarantee 100% accuracy of the data. Attack updates will be made as source data is reported by reputable sources. By viewing, accessing, or using RRA you acknowledge you are doing so at your own risk.