Russian-linked ransomware gang ALPHV, also known as BlackCat, has leaked approximately 1.45 terabytes of sensitive data allegedly stolen from HWL Ebsworth, Australia’s largest commercial law firm. The leak comes after the firm refused to give in to ransom demands.
The cybercriminals, active since late 2021 and offering “ransomware-as-a-service,” released a massive amount of data following a month-long standoff with the law firm. Last week, ALPHV issued a final warning, demanding a rumored $5 million ransom. The group has threatened to release more data if their demands are unmet. According to ALPHV, they stole over four terabytes of data from HWL Ebsworth’s servers in late April.
While it remains unclear what specific data was published, ALPHV has previously claimed to possess internal company information, including employee CVs, IDs, financial reports, accounting data, client documentation, credit card information, and a comprehensive network map.
In response to the extortion attempts, a spokesperson for HWL Ebsworth stated that the firm would not yield to the threat actor’s demands, even if it meant enduring the consequences of a potentially damaging data leak. The firm is currently investigating the claims.
The breach of Australia’s largest legal partnership, which comprises 280 partners and over 1,300 staff members, presents a significant challenge for the firm and its clients. Notable clients of HWL Ebsworth have included ANZ, the South Australian, Queensland, and ACT governments, the Department of Environment and Human Services, the Australian Taxation Office (ATO), ASX50, the Reserve Bank of Australia, Qatar Airways, and various levels of government.
