Illustration: Falcon ransomware group claims 260 GB theft from Buchanan Ingersoll law firm
Sistemas internos do escritório de advocacia… · Breach

Falcon ransomware group claims 260 GB theft from Buchanan Ingersoll law firm

· 1 min read

The Falcon ransomware group listed the Pittsburgh law firm Buchanan Ingersoll & Rooney on its leak site and claims a 260 GB extraction, including a full Microsoft Dynamics CRM export with account and contact records. The firm has not confirmed the incident and the data has not been verified. Clients should watch for firm-themed phishing, fake invoices and payment-change requests.

WhatsApp LinkedIn X
LowBreachNo software to update
In this article
  1. What happened
  2. Why it matters
  3. What to do
  4. For the technical team
  5. Timeline
  6. Sources

What happened

The Falcon ransomware group listed the Pittsburgh law firm Buchanan Ingersoll & Rooney on its leak site. The group claims a 260 GB extraction, including a full Microsoft Dynamics CRM export with account and contact records. The firm has not confirmed the incident and the data has not been verified.

Incidents like this, every morning

The ones that need action first, in a 3-minute read.

Free · 1 email a day, in the morning · no spam, unsubscribe in 1 click

Why it matters

If confirmed, the leak could expose client relationships, matter contacts and deal pipelines. Such data enables targeted phishing and extortion of the firm's clients. According to DailyDarkWeb, Falcon has repeatedly targeted US law firms, including Weitz & Luxenberg and Beasley Allen.

What to do

Watch for official statements from the firm and check which company data is at risk. Warn staff and clients about firm-themed phishing, fake invoices and payment-change requests. Confirm through a known channel before approving any banking change.

For the technical team

Affected
Sistemas internos do escritório de advocacia Buchanan Ingersoll & Rooney, sediado em Pittsburgh (EUA); alegada extração · Internal systems of Buchanan Ingersoll & Rooney; alleged full Microsoft Dynamics CRM export with account and contact records.
Exploitation
Unverified claim by the Falcon group on its leak site, reported by DailyDarkWeb. The firm has not confirmed the incident and the data has not been verified.
Fix
Not applicable; no software fix involved.
More details
Alleged volume: 260 GB (182 GB compressed). According to DailyDarkWeb, Falcon has previously listed other US law firms, including Weitz & Luxenberg and Beasley Allen. A law firm CRM export can expose client relationships and support phishing and extortion.

Timeline

  1. Falcon group listed the firm on its leak site claiming a 260 GB extraction; the incident remains unconfirmed.

Sources 1 source

Get the next one tomorrow morning

One email a day with what changed, what to fix first and how. After signing up you get the full feed.

Free · 1 email a day, in the morning · no spam, unsubscribe in 1 click

Share it with your team

Whoever handles security with you should get it too.

LinkedIn X

Your colleague gets a confirmation request. Nothing is sent unless they confirm.

See all news

Read also

Before you go: get this every day

The HIFY Radar daily edition lands every morning with the incidents that need action. Free.

Free · 1 email a day, in the morning · no spam, unsubscribe in 1 click