scullionlaw.com Listed by blackbasta Ransomware Group

On February 29, 2024, the website of Scullion Law, a Glasgow-based law firm, appeared on the leak site operated by the Black Basta ransomware group. The listing claims that roughly 155 GB of internal files were exfiltrated during a ransomware attack. Anyone whose personal data, employee records, or client documents were held by the firm may now be exposed.

Details in the Leak-Site Listing

The Black Basta leak page for scullionlaw.com states that attackers obtained four broad categories of material: company data, personal employee data, personal documents belonging to users and clients, and confidential documents. The listing does not specify exact record counts or name individual victims. It simply lists the firm’s address at 105 Cadzow Street, Hamilton ML3 6HG, United Kingdom, and presents the data as proof that the ransomware operation successfully penetrated the firm’s systems. The disclosure indicates the files were stolen before encryption or as part of a double-extortion tactic common to this group.

Why This Matters for You and Your Family

If you have ever been a client of Scullion Law, worked there, or had documents stored with the firm, your personal information could be sitting inside the 155 GB archive now advertised on a criminal marketplace. Law firms routinely hold full names, addresses, dates of birth, national insurance numbers, financial details, medical or court records, and correspondence that can be used for identity theft or targeted fraud. Because the breach involves both employee and client data, entire households can be affected at once. The exposure is not abstract; it is concrete evidence that sensitive paperwork tied to real people has left the firm’s control.

The Doxxing and Identity-Chain Risk

Stolen confidential documents rarely stay isolated. Attackers and subsequent buyers can cross-reference names, email addresses, phone numbers, and addresses found in the archive with other breaches. A single leaked client file can link your professional identity to your home address, family members’ names, and online accounts. This creates an identity chain that fuels doxxing, SIM-swapping, or follow-on extortion. Credential leaks of this type also cascade into account takeovers, including gaming accounts belonging to you or your children, where the same email or password may have been reused.

Black Basta’s Known Track Record

Public reporting attributes Black Basta’s emergence to early 2022. The group rapidly became one of the most active ransomware operations, typically gaining initial access through compromised remote desktop credentials or phishing. Once inside a network they exfiltrate data before deploying their encryptor. They then demand payment to prevent publication on their leak site, often following up with direct threats to victims’ customers or partners. Notable prior incidents include attacks on large corporations and professional services firms, many of which resulted in terabytes of internal and client data being published when negotiations failed. The Scullion Law listing follows this established playbook.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, with cleanup handled by the service.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure surfaces in hours rather than months.
• Rotate any password you ever used at Scullion Law or on related accounts, then enable two-factor authentication through an authenticator app instead of SMS.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts that can chain back to the same leaked address or email.
• Let remediation specialists manage takedown requests for any exposed personal documents appearing on data-broker or underground sites.

The incident underscores that even well-regarded local firms can become targets, and the data they hold travels farther and faster than most people expect. Starting proactive steps now limits how far any single breach can reach. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, and hands-on remediation by specialists, with household coverage that includes children’s gaming accounts vulnerable to credential-based takeovers.