Weil Reportedly Paid Up to $20 Million After Luna Moth Threatened to Publish Client Data
Summary
Weil confirmed an incident involving unauthorized upload of a limited number of client documents, but said its network was not accessed. The Insurer reported Luna Moth demanded a large ransom and Weil paid $18–20 million; the firm did not confirm payment.
Key points
- Weil said a threat actor uploaded a limited number of client documents to external cloud storage; the firm said its network was not accessed.
- The Insurer reported that Luna Moth threatened to publish confidential client data and demanded a double-digit-million ransom.
- Weil reportedly paid $18–20 million within three days of the demand, but the firm did not confirm whether it paid.
- Weil said it activated response protocols, took containment measures, investigated with third-party cybersecurity professionals, and notified law enforcement.
- The firm said the incident did not disrupt operations, ongoing monitoring found no unauthorized activity, and affected clients were contacted.
Article Details
- Victim Organization
- Weil, Gotshal & Manges LLP
- Incident Type
- Cyber extortion involving the unauthorized uploading of a limited number of client documents to an external cloud storage site.
- Data Types Exposed
- Confidential client documents
- Affected Records
- A limited number of client documents; exact number not disclosed.
- Affected Data Size
- Not disclosed
- Operational Impact
- Weil said forensic investigations found the attacker did not access its network and the incident did not disrupt operations. Ongoing monitoring detected no unauthorized activity.
- Ransom Or Extortion
- Luna Moth allegedly demanded a double-digit-million ransom and threatened to publish stolen client data. A report claimed Weil paid $18 million to $20 million within three days, but Weil did not comment on whether it paid.
- Claim Status
- confirmed