Travelex hackers hit celebrity law firm with ransomware

Hackers claim to have compromised 756GB of data including contracts and personal emails

The website for a New York law firm with a large celebrity clientele has been down for almost a week after it was hit with a ransomware attack. 

The group claiming responsibility for the attack used the ransomware strain known as Sodinokibi, sometimes also referred to as REvil, the same strain used to take down the Travelex website at the start of the year.

Its latest victim is entertainment and media law firm Grubman Shire Meiselas and Sacks. The attackers claims to have compromised 756GB of data including contracts and personal emails and it's threatening to release the sensitive information in nine instalments.

Data for stars such as Madonna, Lady Gaga and Bruce Springsteen are reported to be included in the hack, which Grubman Shire Meiselas & Sacks confirmed on Friday.

"We can confirm that we've been victimised by a cyberattack," the firm said in a statement to Variety. "We have notified our clients and our staff. We have hired the world's experts who specialise in this area, and we are working around the clock to address these matters."

The company's website was still down on Wednesday, with just the firm's logo on display, and it is unknown what the hacker's demands are and whether they have been negotiated. The damage to the Travelex website kept it offline for weeks and reportedly cost the firm £25 million.

"This breach appears to be a surgical strike against Grubman, knowing they represent many of the biggest celebrities in the world," said Sam Curry, CSO at Cybereason.

Related Resource

IT faces new security challenges in the wake of COVID-19

Beat the crisis by learning how to secure your network

Download now

"Today, its no longer a matter of if, but when a breach will occur. Every company has been hacked, most many times over, and it comes down to how quickly a company identifies malicious activity and stops it. In the case of Grubman and their large list of A list celebrities, most if not all of them are sweating out the current situation and hoping the damage will be minimal."

Featured Resources

Managing security risk and compliance in a challenging landscape

How key technology partners grow with your organisation

Download now

Security best practices for PostgreSQL

Securing data with PostgreSQL

Download now

Transform your MSP business into a money-making machine

Benefits and challenges of a recurring revenue model

Download now

The care and feeding of cloud

How to support cloud infrastructure post-migration

Watch now

Recommended

Best ransomware removal tools
ransomware

Best ransomware removal tools

9 Apr 2021
Hackers leak data from dark web marketplace
cyber security

Hackers leak data from dark web marketplace

9 Apr 2021
Hackers are using fake messages to break into WhatsApp accounts
instant messaging (IM)

Hackers are using fake messages to break into WhatsApp accounts

8 Apr 2021
Hackers sell $38 million in gift cards on Russian marketplace
hacking

Hackers sell $38 million in gift cards on Russian marketplace

7 Apr 2021

Most Popular

Microsoft is submerging servers in boiling liquid to prevent Teams outages
data centres

Microsoft is submerging servers in boiling liquid to prevent Teams outages

7 Apr 2021
Data belonging to 500 million LinkedIn users found for sale on hacker marketplace
hacking

Data belonging to 500 million LinkedIn users found for sale on hacker marketplace

8 Apr 2021
How to find RAM speed, size and type
Laptops

How to find RAM speed, size and type

8 Apr 2021