Travelex hackers hit celebrity law firm with ransomware

Hackers claim to have compromised 756GB of data including contracts and personal emails

The website for a New York law firm with a large celebrity clientele has been down for almost a week after it was hit with a ransomware attack. 

The group claiming responsibility for the attack used the ransomware strain known as Sodinokibi, sometimes also referred to as REvil, the same strain used to take down the Travelex website at the start of the year.

Advertisement - Article continues below

Its latest victim is entertainment and media law firm Grubman Shire Meiselas and Sacks. The attackers claims to have compromised 756GB of data including contracts and personal emails and it's threatening to release the sensitive information in nine instalments.

Data for stars such as Madonna, Lady Gaga and Bruce Springsteen are reported to be included in the hack, which Grubman Shire Meiselas & Sacks confirmed on Friday.

"We can confirm that we've been victimised by a cyberattack," the firm said in a statement to Variety. "We have notified our clients and our staff. We have hired the world's experts who specialise in this area, and we are working around the clock to address these matters."

The company's website was still down on Wednesday, with just the firm's logo on display, and it is unknown what the hacker's demands are and whether they have been negotiated. The damage to the Travelex website kept it offline for weeks and reportedly cost the firm £25 million.

Advertisement
Advertisement - Article continues below
Advertisement - Article continues below

"This breach appears to be a surgical strike against Grubman, knowing they represent many of the biggest celebrities in the world," said Sam Curry, CSO at Cybereason.

Related Resource

IT faces new security challenges in the wake of COVID-19

Beat the crisis by learning how to secure your network

Download now

"Today, its no longer a matter of if, but when a breach will occur. Every company has been hacked, most many times over, and it comes down to how quickly a company identifies malicious activity and stops it. In the case of Grubman and their large list of A list celebrities, most if not all of them are sweating out the current situation and hoping the damage will be minimal."

Featured Resources

Staying ahead of the game in the world of data

Create successful marketing campaigns by understanding your customers better

Download now

Remote working 2020: Advantages and challenges

Discover how to overcome remote working challenges

Download now

Keep your data available with snapshot technology

Synology’s solution to your data protection problem

Download now

After the lockdown - reinventing the way your business works

Your guide to ensuring business continuity, no matter the crisis

Download now
Advertisement

Recommended

How can you protect your business from crypto-ransomware?
Security

How can you protect your business from crypto-ransomware?

4 Nov 2019
Russia hacked Liam Fox's personal email to steal trade documents
phishing

Russia hacked Liam Fox's personal email to steal trade documents

4 Aug 2020
British teenager charged over Twitter hack
hacking

British teenager charged over Twitter hack

3 Aug 2020
Mid-year report says vulnerabilities up 22% in 2020
hacking

Mid-year report says vulnerabilities up 22% in 2020

30 Jul 2020

Most Popular

How to find RAM speed, size and type
Laptops

How to find RAM speed, size and type

3 Aug 2020
How to use Chromecast without Wi-Fi
Mobile

How to use Chromecast without Wi-Fi

4 Aug 2020
UN report points to a 350% rise in phishing websites at start of 2020
phishing

UN report points to a 350% rise in phishing websites at start of 2020

7 Aug 2020