Gleason Flynn Emig McAfee Targeted by Black Basta Ransomware
Ransomware Attack on Gleason, Flynn, Emig & McAfee: A Closer Look
Gleason, Flynn, Emig & McAfee (GFEM), a prominent law firm based in Rockville, Maryland, has recently fallen victim to a ransomware attack orchestrated by the notorious Black Basta group.
About Gleason, Flynn, Emig & McAfee
Founded in 1983, GFEM specializes in defending employers, insurers, and large self-insured entities against claims in Maryland and the District of Columbia. The firm is recognized for its expertise in complex civil litigation, particularly in healthcare and construction sectors. With a team of 1 to 50 employees, GFEM is known for its focused niche in insurance defense and litigation, setting it apart from broader service law firms.
Attack Overview
The ransomware attack resulted in the encryption of approximately 550GB of data, affecting corporate data, personal folders, and confidential client information. Despite the breach, GFEM's website and contact information remain operational. The firm's leadership, including founders Jim Gleason and Mike Flynn, have yet to issue public statements regarding the incident.
Black Basta: The Ransomware Group
Emerging in April 2022, Black Basta operates as a Ransomware-as-a-Service (RaaS) provider, employing double extortion tactics. The group is known for targeting high-value sectors such as healthcare and finance, leveraging sophisticated techniques to infiltrate systems. Black Basta's operations are characterized by their closed affiliate model, ensuring high standards in execution and security.
Potential Vulnerabilities
GFEM's specialization in handling sensitive legal matters makes it an attractive target for ransomware groups like Black Basta. The firm's reliance on confidential client data and its operational dependencies increase its susceptibility to such attacks. Black Basta likely penetrated GFEM's systems through spear-phishing or exploiting known vulnerabilities, a common tactic in their modus operandi.
Implications for the Legal Sector
This attack underscores the critical need for enhanced cybersecurity measures within the legal industry. As law firms continue to manage sensitive data, they must remain vigilant against evolving cyber threats. The incident at GFEM serves as a stark reminder of the potential risks and the importance of proactive defense strategies.
Sources:
See Halcyon in action
Interested in getting a demo?
Fill out the form to meet with a Halcyon Anti-Ransomware Expert!