Claim: Morrison & Foerster listed on extortion site, no data published
The 'leakeddata' extortion site added law firm Morrison & Foerster (MoFo) to its list. The entry only names and describes the firm, with no data volume, file list or samples. The claim is unverified and the firm has not confirmed an incident; monitor the site and keep the response plan ready.
What happened
The 'leakeddata' extortion site added law firm Morrison & Foerster (MoFo) to its victim list, according to DailyDarkWeb. The entry includes no data volume, file list or samples. The firm has not confirmed an incident and the claim has not been independently verified.
Why it matters
According to DailyDarkWeb, elite firms are targeted because their files hold privileged M&A, litigation, privacy and regulatory work for major corporate clients. A listing alone does not prove a breach and could reflect reused or third-party data. If real data emerges, confidential client information could be exposed.
What to do
Treat this as an unverified threat-actor claim. Monitor the 'leakeddata' site for data publications and trigger the incident response plan if anything is posted. If your company is a client, review what confidential information has been shared with the firm.
For the technical team
- Affected
- Morrison & Foerster LLP Sistemas internos da Morrison & Foerster (MoFo), escritório de advocacia internacional fundado em São Francisco, com esc · Morrison & Foerster LLP (MoFo), an international law firm founded in San Francisco with offices across the United States, Asia and Europe. No specific system or version cited.
- Exploitation
- No technical exploitation reported. According to DailyDarkWeb, the 'leakeddata' site entry only names and describes the firm, with no data published. Unverified claim; the firm has not publicly confirmed an incident.
- Fix
- No fix applicable; the sources cite no vulnerability or specific product.
- Vector
- Not described in the sources. This is a listing on an extortion site, with no details on how access might have occurred.
- More details
- The 'leakeddata' site has been listing major US law firms for weeks, according to DailyDarkWeb. The DailyDarkWeb analyst states that extortion crews go after elite firms for their privileged content (M&A, litigation, privacy, regulatory) and that a listing alone does not prove a breach, possibly reflecting reused or third-party data.
Timeline
'leakeddata' extortion group lists Morrison & Foerster, with no data published yet.
Sources 1 source
- @DailyDarkWeb @DailyDarkWeb
