Illustration: Redact Group Lists Holland & Knight, Claims 29.7 GB
Holland & Knight · Breach

Redact Group Lists Holland & Knight, Claims 29.7 GB

· 1 min read

The Redact group listed Holland & Knight, one of the largest US law firms, on its leak site and claims to hold 29.7 GB of data, about 11,156 files. The listing does not describe the contents, the firm has not commented, and the source calls the claim unverified; it is unclear whether it ties to the social engineering incident confirmed in September, which affected 14 clients. Clients and counterparties should watch for phishing or extortion messages referencing Holland & Knight.

WhatsApp LinkedIn X
LowBreachNo software to update
In this article
  1. What happened
  2. Why it matters
  3. What to do
  4. For the technical team
  5. Timeline
  6. Sources

What happened

The Redact group listed Holland & Knight, one of the largest US law firms, on its leak site and claims to hold 29.7 GB of data, about 11,156 files. The listing does not say what the files contain. The firm has not commented on the claim.

Incidents like this, every morning

The ones that need action first, in a 3-minute read.

Free · 1 email a day, in the morning · no spam, unsubscribe in 1 click

Why it matters

Law firms hold sensitive client, deal and litigation files, which makes them prime extortion targets. If confirmed, the leak could expose confidential data of clients and counterparties. The claim is unverified and it is unclear whether it ties to the social engineering incident confirmed in September, which affected 14 clients.

What to do

Monitor Holland & Knight communications for confirmation or denial. Warn staff about phishing or extortion messages referencing the firm. Review sensitive information handled with the firm.

For the technical team

Affected
Holland & Knight, um dos maiores escritórios de advocacia dos EUA; listagem no site de vazamentos do grupo Redact, com a · Holland & Knight; the listing claims 29.7 GB, about 11,156 files, with no description of contents.
Exploitation
Unverified threat-actor claim on the Redact group leak site, reported by DailyDarkWeb; the victim has not confirmed. It is unclear whether the listing ties to the September incident, which affected 14 clients and led to a breach notice in October.
Fix
Not applicable to a breach; no fix.
Vector
Prior incident confirmed by the firm: social engineering gave an attacker access to one firm computer, from which a small number of files were taken. The method behind the new claim is not described in the listing.
More details
The source notes law firms are prime extortion targets due to the value of client, deal and litigation files, and advises attention to phishing or extortion messages referencing Holland & Knight matters.

Timeline

  1. Redact group listed Holland & Knight on a new leak site, claiming 29.7 GB of data.

Sources 1 source

Get the next one tomorrow morning

One email a day with what changed, what to fix first and how. After signing up you get the full feed.

Free · 1 email a day, in the morning · no spam, unsubscribe in 1 click

Share it with your team

Whoever handles security with you should get it too.

LinkedIn X

Your colleague gets a confirmation request. Nothing is sent unless they confirm.

See all news

Read also

Before you go: get this every day

The HIFY Radar daily edition lands every morning with the incidents that need action. Free.

Free · 1 email a day, in the morning · no spam, unsubscribe in 1 click