Silent Ransom Group
Jones Day wasn’t the only big law firm to recently fall prey to threat actors variously known as Silent Ransom Group, Luna Moth, Chatty Spider, or UNC3753. DataBreaches will refer to them as the Silent Ransom Group
Law firms hold the most sensitive corporate data outside the client itself — M&A, IP, litigation, settlements. They are systematically targeted by both criminal and state actors. Below is every law-firm breach LeakTrace has indexed.
Jones Day wasn’t the only big law firm to recently fall prey to threat actors variously known as Silent Ransom Group, Luna Moth, Chatty Spider, or UNC3753. DataBreaches will refer to them as the Silent Ransom Group
Customer metadata and business information accessed
85K client records from Canadian offices exposed via supply chain compromise
Federal judges, DOJ attorneys, SEC staff data accessed — 118 .gov accounts compromised
340K transaction records compromised
Legal transcription vendor breach — sensitive court proceedings compromised via subcontractor
510K cross-border dispute records exposed via compromised document review platform
210K client records compromised via vendor
120K client records from 47 offices worldwide exposed via compromised email gateway
280K restructuring records stolen
290K client records exposed in LockBit ransomware attack
Client M&A deal documents and litigation files exposed via compromised document management system
280K antitrust investigation records exposed via phishing attack on senior associates
Law firm cyberattacks nearly doubled in 2025 — average breach cost $5.08M
340K client records stolen in ransomware
180K client records compromised
210K M&A deal records exposed
180K client records exposed
350K M&A deal records exposed via compromised secure file sharing platform
210K M&A deal records exposed in targeted attack
480K client records from regulatory investigations exposed via ransomware attack
340K client records compromised
180K M&A deal records exposed
340K client records compromised in second incident