Legal Sector Under Siege: 31 Ransomware Attacks in Seven Days

The legal sector saw a significant spike in ransomware and cyber extortion activity over the past seven days, with DARKFEED tracking 31 distinct attacks. This isn’t just opportunistic scanning; it indicates targeted campaigns against firms holding sensitive client data and intellectual property, making them prime targets for extortion.

DARKFEED’s analysis shows the United States was the primary target, accounting for 24 of the 31 incidents. Other affected countries included Paraguay, Germany, Greece, the United Kingdom, France, and Qatar. The most active threat groups were LeakedData, responsible for 19 attacks, followed by Payload, DragonForce, and Qilin with two attacks each. Lockbit, INC, and Anubis also registered activity.

This trend highlights the acute risk legal organizations face. Their business model relies on discretion and data integrity, making them highly susceptible to the reputational and operational damage that ransomware and data leaks inflict. Attackers know the pressure points and are exploiting them effectively.