Cyber Attacks Target Three Major US Law Firms

• •Three major law firms confirmed cyber incidents involving file access.
• •Attacks attributed to Silent Ransom Group using social engineering techniques.
• •No specific vulnerabilities or CVEs identified; systems remain operational.

Three major US law firms—Holland & Knight, Greenberg Traurig, and Katten—have confirmed cyber incidents where attackers accessed files, including client information. The incidents are part of a broader wave of attacks targeting law firms, attributed to the Silent Ransom Group, which uses social engineering tactics. Holland & Knight reported unauthorized remote access through social engineering, affecting 14 clients. Greenberg Traurig acknowledged that documents accessed by an unauthorized actor were posted on the dark web. All firms stated their systems remained operational and have contacted law enforcement. The FBI had previously warned about the Silent Ransom Group's targeting of law firms since May 2026. The attacks highlight ongoing vulnerabilities within the legal sector, with no specific vulnerabilities or CVEs identified. The current exploitation status remains unclear as the details about the attack methods are not fully disclosed.