Travelex hackers hit celebrity law firm with ransomware

Hackers claim to have compromised 756GB of data including contracts and personal emails

The website for a New York law firm with a large celebrity clientele has been down for almost a week after it was hit with a ransomware attack. 

The group claiming responsibility for the attack used the ransomware strain known as Sodinokibi, sometimes also referred to as REvil, the same strain used to take down the Travelex website at the start of the year.

Its latest victim is entertainment and media law firm Grubman Shire Meiselas and Sacks. The attackers claims to have compromised 756GB of data including contracts and personal emails and it's threatening to release the sensitive information in nine instalments.

Data for stars such as Madonna, Lady Gaga and Bruce Springsteen are reported to be included in the hack, which Grubman Shire Meiselas & Sacks confirmed on Friday.

"We can confirm that we've been victimised by a cyberattack," the firm said in a statement to Variety. "We have notified our clients and our staff. We have hired the world's experts who specialise in this area, and we are working around the clock to address these matters."

The company's website was still down on Wednesday, with just the firm's logo on display, and it is unknown what the hacker's demands are and whether they have been negotiated. The damage to the Travelex website kept it offline for weeks and reportedly cost the firm £25 million.

"This breach appears to be a surgical strike against Grubman, knowing they represent many of the biggest celebrities in the world," said Sam Curry, CSO at Cybereason.

Related Resource

IT faces new security challenges in the wake of COVID-19

Beat the crisis by learning how to secure your network

Download now

"Today, its no longer a matter of if, but when a breach will occur. Every company has been hacked, most many times over, and it comes down to how quickly a company identifies malicious activity and stops it. In the case of Grubman and their large list of A list celebrities, most if not all of them are sweating out the current situation and hoping the damage will be minimal."

Featured Resources

Managing security risk and compliance in a challenging landscape

How key technology partners grow with your organisation

Download now

Evaluate your order-to-cash process

15 recommended metrics to benchmark your O2C operations

Download now

AI 360: Hold, fold, or double down?

How AI can benefit your business

Download now

Getting started with Azure Red Hat OpenShift

A developer’s guide to improving application building and deployment capabilities

Download now

Recommended

Best ransomware removal tools
ransomware

Best ransomware removal tools

22 Jan 2021
Global ransom DDoS extortionists are retargeting companies
distributed denial of service (DDOS)

Global ransom DDoS extortionists are retargeting companies

22 Jan 2021
BEC scammers are using Google Forms to identify easy victims
phishing

BEC scammers are using Google Forms to identify easy victims

21 Jan 2021
FBI warns of ongoing corporate vishing attacks
phishing

FBI warns of ongoing corporate vishing attacks

19 Jan 2021

Most Popular

How to move Windows 10 from your old hard drive to SSD
operating systems

How to move Windows 10 from your old hard drive to SSD

21 Jan 2021
What is the Raspberry Pi Pico?
Hardware

What is the Raspberry Pi Pico?

21 Jan 2021
How to recover deleted emails in Gmail
email delivery

How to recover deleted emails in Gmail

6 Jan 2021