Lewis Brisbois Restricts Remote Work After Reported Cyberattack
Summary
Bloomberg Law reported that Lewis Brisbois restricted remote work after blocking outside network access. Emails described calls from people posing as IT staff; whether attackers accessed systems or exposed data remains unclear.
Key points
- Bloomberg Law reported that the firm blocked outside access to internal networks and required remote and hybrid employees to work in offices or use firm-issued computers.
- According to emails reported by Bloomberg Law, the firm’s security director warned on June 5 that callers were impersonating internal IT staff and falsifying caller ID.
- The firm reportedly expects to permanently bar employees from accessing its systems through personal devices.
- The reported tactics resemble those attributed by the FBI to Silent Ransom Group, but Lewis Brisbois has not attributed the incident to that group.
- No public client-service outage was confirmed, and it remains unclear whether attackers accessed the firm’s systems or exposed client or employee data.
Article Details
- Victim Organization
- Lewis Brisbois Bisgaard & Smith LLP
- Incident Type
- Reported cyberattack involving calls from people posing as internal IT staff; whether attackers entered the firm's network is unclear.
- Incident Date
- 2026-06-05
- Disclosure Date
- 2026-06-17
- Affected Records
- Unknown
- Affected Data Size
- Unknown
- Operational Impact
- The firm blocked outside access to internal networks and directed remote and hybrid employees to work from offices or use firm-issued computers. No public client-service outage was confirmed; recovery status and restoration of normal remote access were unclear.
- Ransom Or Extortion
- No public claim of responsibility was found. Whether a ransom demand was received is unknown.
- Claim Status
- alleged
MITRE ATT&CK
People
Threat Actors
Silent Ransom GroupThe FBI described this group as targeting U.S. law firms through calls and phishing emails posing as IT support. The article says the incident's tactics overlap with the group's reported pattern but does not attribute the Lewis Brisbois incident to it.UNC3753The article identifies UNC3753 as another name for Silent Ransom Group, which the FBI said targets U.S. law firms; the Lewis Brisbois incident was not attributed to the group.