Scalable Business Technologies and No Phish Left Behind are not affiliated with nor do we condone illegal and harmful activities. As part of our ongoing efforts to educate the general community and encourage consumer privacy, cyberawareness, and safe browsing, we do occasionally report on larger security breaches strictly to raise awareness and emphasize the importance of cybersecurity training.
As per a post on their dark web blog, Abyss plans to leak this data on 5/19/23 unless the victim law firm successfully negotiates otherwise.
At the time of this writing, we are not sure how the group gained access to the data; however, in most cases of cybercrime, the point of entry is not brute force through perimeter defense, but rather a sophisticated form of social engineering via phishing, spoofing, or fraudulent software installations.
If you work for or have done business with Piasucki & White:
- Change passwords to any sensitive systems.
- Turn on multi-factor authentication wherever possible.
- Monitor credit usage for fraud.
- Ensure fully patched and up-to-date computing systems and software.
- Report any suspicious activity immediately.
Ransomware is an especially dangerous software that spreads throughout a network and encrypts any system it accesses. Files are typically uploaded to the hackers' servers and held "hostage" until the victim performs certain actions (typically paying the hackers with cryptocurrency).
Hacks like this one can cause devastating harm to companies and their community of customers and business partners, not to mention the extremely high cost of reactive recoveries.
If you, or anyone you know, would like a bit of guidance around the proactive cybersecurity and business continuity planning of your business, please contact Scalable Business Technologies at any time.
"Ransomware is more about manipulating the vulnerabilities in human psychology than the adversary's technological sophistication."
-- James Scott, Senior Fellow, ICIT