Ransomware Attack Exposes 1.3 TB of Data at Italian Law Firm Isolabella

Incident Date: Aug 24, 2024

Attack Overview
VICTIM
Studio Legale Associato Isolabella
INDUSTRY
Law Firms & Legal Services
LOCATION
Italy
ATTACKER
Bianlian
FIRST REPORTED
August 24, 2024

Ransomware Attack on Studio Legale Associato Isolabella by BianLian

Studio Legale Associato Isolabella, a prominent Italian law firm specializing in criminal law, has fallen victim to a ransomware attack by the notorious BianLian group. The firm, founded by Lodovico Isolabella in the early 1960s, is renowned for its expertise in corporate criminal law, handling complex legal issues related to corporate liability, financial crimes, and environmental law.

About Studio Legale Associato Isolabella

Based in Milan, Italy, Studio Legale Associato Isolabella employs over 25 professionals, including partners Francesco Isolabella and Luigi Isolabella. The firm has built a strong reputation for its commitment to client loyalty and independence, encapsulated in its motto, "The Client is our flag." The firm's legal professionals are highly trained and experienced, focusing on both malicious and negligent crimes, compliance matters, and internal investigations.

Attack Overview

The BianLian ransomware group claims to have exfiltrated 1.3 TB of sensitive data from Studio Legale Associato Isolabella. The compromised data includes financial records, human resources information, case files, court documents, exhibits, clients' personally identifiable information (PII), protected health information (PHI), and internal and external email correspondence. This breach poses significant risks to the firm's operations and the privacy of its clients.

About BianLian Ransomware Group

BianLian is a sophisticated ransomware group known for its evolution from a banking trojan to advanced ransomware operations. The group employs extortion-based strategies, initially gaining access through compromised Remote Desktop Protocol (RDP) credentials. BianLian uses custom backdoors, PowerShell, and Windows Command Shell for defense evasion, and various tools for discovery, lateral movement, collection, exfiltration, and impact.

Penetration and Impact

BianLian's attack on Studio Legale Associato Isolabella underscores the vulnerabilities faced by law firms handling sensitive data. The group's shift towards exfiltration-based extortion highlights the evolving threat landscape. The attack on Studio Legale Associato Isolabella not only threatens the firm's operations but also the confidentiality of its clients' information, emphasizing the need for enhanced cybersecurity measures in the legal sector.

Sources

See Halcyon in action

Interested in getting a demo?
Fill out the form to meet with a Halcyon Anti-Ransomware Expert!

1
2
3
Let's get started
1
1
2
3
1
1
2
2
3
Back
Next
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.