FBI Warns of Silent Ransom Group's In-Person Law Firm Attacks
The FBI issued an advisory on Silent Ransom Group (also known as Luna Moth), which has targeted U.S. law firms since 2023. The group uses social engineering, impersonating IT staff via calls or emails, and in some cases appears in person to steal sensitive client and case data for extortion without deploying encryption ransomware. No specific victim count disclosed in the new warning.
- client-data
- legal-documents
- sensitive-case-files
The FBI has warned that the Silent Ransom Group, also known as Luna Moth, continues to target U.S. law firms through social engineering and occasional in-person visits to steal client data, legal documents, and sensitive case files for extortion.
Public reporting indicates the group has operated against law firms since at least 2023. Rather than deploying encryption ransomware, the actors focus on data theft followed by demands for payment to prevent public release of the information. Tactics include impersonating IT support staff over phone or email and, in some documented cases, physically appearing at offices to gain access. The FBI advisory does not disclose a specific number of victims or the volume of records compromised in the incidents covered by the latest warning. Industry research from sources such as DoxxScan™ continuous monitoring indicates that legal-sector breaches frequently expose names, contact details, financial records, and case-related personal information that can circulate in underground markets for months or years before detection.
Want the rest of this breakdown?
Sign up free to keep reading. Members get extended access, the weekly breach digest, and a complimentary Warden™ to see if their identity is exposed in the breaches we cover.
A breach leaks your credentials. Then hackers chain those credentials to your address, family, phone, and employer using public broker sites. We’re the only tool built around that chain.
⚠ Were you in this breach?
Free email scanner. We check your address against 15.4B+ leaked records (including this breach) in 15 seconds — then show you the $19 cleanup that removes you from the broker sites aggregating leaked data.
Check my email — free →
