Weil Says Threat Actor Uploaded Client Documents; Report Says Firm Paid Up to $20M
Summary
Weil said a threat actor uploaded a limited number of client documents to external storage, while its investigation found no network access or disruption. The Insurer reported an $18M–$20M payment, which Weil has not confirmed.
Key points
- A Weil spokesperson said a threat actor uploaded a limited number of client documents to an external cloud storage site.
- Weil said forensic investigators found no access to its network and no operational disruption; the firm contacted affected clients and is monitoring for further activity.
- The Insurer, citing people familiar with the matter, reported Weil paid $18 million to $20 million to prevent publication; Weil has not confirmed a payment.
- The Insurer reported the payment occurred within three days of the demand.
- The group allegedly behind the Weil incident was identified as Silent Ransom Group, also known as Luna Moth or Chatty Spider.
- An FBI warning said the group has targeted U.S. law firms since 2023; a newer warning described impersonation of internal IT staff and, in some cases, in-person visits to access devices and steal data.
- Jones Day confirmed hackers accessed firm data in April; The Insurer reported a related $13 million demand went unpaid.
Article Details
- Victim Organization
- Weil
- Incident Type
- Cyber extortion involving the unauthorized uploading of client documents to external cloud storage; the firm said the threat actor did not access its network.
- Data Types Exposed
- Client documents
- Affected Records
- A limited number of client documents; exact count not disclosed.
- Operational Impact
- Weil said the incident did not disrupt operations and forensic investigations found that the threat actor did not access the firm's network. The firm contacted affected clients and continued monitoring.
- Ransom Or Extortion
- The Insurer reported that Weil paid between $18 million and $20 million within three days of the demand to prevent publication of stolen client data. Weil has not confirmed that a payment was made.
- Claim Status
- confirmed