Ransomware Attack Hits John W. Brooker & Co., CPAs in Oakland

Incident Date: Aug 31, 2024

Attack Overview
VICTIM
John W. Brooker & Co., CPAs
INDUSTRY
Finance
LOCATION
USA
ATTACKER
Cicada 3301
FIRST REPORTED
August 31, 2024

Ransomware Attack on John W. Brooker & Co., CPAs

On August 31, 2024, John W. Brooker & Co., CPAs, a reputable financial advisory firm based in Oakland, California, became the latest victim of a ransomware attack orchestrated by the cybercriminal group Cicada3301. The firm, which has been in operation for over 42 years, specializes in providing comprehensive financial services to medical, dental, and other service-oriented businesses.

Company Profile

John W. Brooker & Co., CPAs is known for its tailored accounting, tax planning, consulting, and financial advisory services. The firm manages approximately $411.67 million in regulatory assets across 540 client accounts, focusing on high-net-worth individuals, charitable organizations, and pension plans. Their expertise in the financial needs of medical and dental practices sets them apart in the industry.

Attack Overview

The ransomware attack targeted the firm's website, https://www.brooker-cpa.com, and resulted in the compromise of 300 units of sensitive data. The attack has raised significant concerns about the security of client information and the firm's ability to maintain its high standards of personalized financial advisory services.

About Cicada3301

Cicada3301 is a relatively new threat actor group that emerged in June 2024. Unlike traditional ransomware groups, Cicada3301 operates as a data broker, focusing on stealing sensitive data and selling it on dark web marketplaces. This approach marks a shift from conventional ransomware tactics to more sustained and long-term damage strategies.

Penetration and Vulnerabilities

While the exact method of penetration remains unclear, it is likely that Cicada3301 exploited vulnerabilities in the firm's cybersecurity infrastructure. Given the firm's focus on high-net-worth clients and sensitive financial data, it presents an attractive target for cybercriminals. The attack underscores the critical need for enhanced cybersecurity measures in financial institutions.

Impact and Implications

The attack on John W. Brooker & Co., CPAs highlights the growing threat of ransomware attacks on financial institutions. The exposure of sensitive client data can lead to severe consequences, including identity theft, financial loss, and reputational damage. The firm must now navigate the challenges of restoring its operations and safeguarding its clients' information.

See Halcyon in action

Interested in getting a demo?
Fill out the form to meet with a Halcyon Anti-Ransomware Expert!

1
2
3
Let's get started
1
1
2
3
1
1
2
2
3
Back
Next
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.