Black , Bashor & Porsch Listed by SilentRansomGroup Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On January 14, 2025, the accounting firm Black , Bashor & Porsch was listed by the ransomware group known as SilentRansomGroup. Public reporting indicates that internal files were exfiltrated in a ransomware attack. The number of people affected remains unknown, and further details about the scale or precise timing of the intrusion have not been disclosed. For clients and others connected to an accounting practice, any unauthorized access to internal records raises concrete questions about the security of financial and personal information held by the firm.

This listing forms the core of what is currently known. SilentRansomGroup’s claim that it obtained and removed internal files has not been independently confirmed in the available public record, and the firm itself has not issued a detailed public accounting of the incident beyond the basic facts reported. The situation therefore rests on the group’s assertion and the limited summary that the organization provides accounting services.

What happened

According to the reported information, Black , Bashor & Porsch was listed by SilentRansomGroup on January 14, 2025. The summary states that internal files were exfiltrated in a ransomware attack. No figure has been given for the number of individuals affected, and no public details have emerged about the method of initial access, the duration of the attackers’ presence, or the volume of data taken. The exact date of the intrusion itself is undisclosed; only the date of the listing is known. Public detail is limited to the fact of the listing and the characterization of the material as internal files obtained through ransomware activity.

Ransomware incidents of this type typically involve both encryption of systems and the prior theft of data, after which the operators threaten to publish the material if a ransom is not paid. In this case, the available facts confirm only the listing and the claim of exfiltration. No confirmation of data publication, ransom demand amounts, or operational disruption has been provided in the public record.

Inside SilentRansomGroup

SilentRansomGroup is a ransomware operation that has been documented in open-source reporting as employing double-extortion tactics: encrypting victim systems while also stealing data and threatening to leak it. The group has been observed using social-engineering techniques, including voice phishing and other forms of contact that impersonate legitimate IT or support personnel, to gain initial footholds. Once inside a network, operators commonly move laterally, identify valuable repositories, exfiltrate selected files, and then deploy ransomware. Victims are subsequently listed on a dedicated leak site as leverage.

Public analyses of prior SilentRansomGroup activity describe a pattern of targeting mid-sized professional-services organizations, including those in legal, financial, and accounting fields, where sensitive client records are concentrated. The group’s leak-site listings function as claims of successful compromise; they do not by themselves constitute independent verification. In the present case, the listing of Black , Bashor & Porsch is therefore treated as an assertion by the group that it obtained internal files, rather than as a confirmed forensic finding. No additional claims by SilentRansomGroup specifically about this victim—beyond the fact of the listing and the description of internal-file exfiltration—appear in the available facts.

Who is Black , Bashor & Porsch?

Black , Bashor & Porsch is an organization that provides accounting services. Firms of this type routinely handle bookkeeping, tax preparation, financial statements, payroll, and related advisory work for individuals and businesses. In the course of that work they typically collect and store client names, addresses, Social Security or tax-identification numbers, bank-account details, income records, expense documentation, and correspondence containing financial and personal information. They may also maintain internal operational files, employee records, and proprietary work papers.

A breach at an accounting practice is consequential because the data under its control is both concentrated and high-value. Clients entrust such firms with information that, if exposed, can be used for identity theft, tax fraud, or targeted financial crime. The firm itself faces operational, regulatory, and reputational consequences that can affect its ability to continue serving clients. Public detail about the precise size or client base of Black , Bashor & Porsch is not provided in the available facts, but the nature of accounting services makes clear why unauthorized access to its internal files is a matter of legitimate concern.

The information in question

The facts state that internal files were exfiltrated in the ransomware attack. No further breakdown of file types, categories of personal data, or specific document titles has been disclosed. The exact contents therefore remain unconfirmed.

Organizations that deliver accounting services commonly hold tax returns, financial statements, client contact and identification data, bank and payment information, payroll records, and internal correspondence. They may also retain employee personnel files and operational documents. Because the public record does not enumerate which of these categories, if any, were among the exfiltrated material, it is not possible to state with certainty what information was taken. Readers should treat any assertion about specific data elements as unverified unless and until the firm or an independent investigation provides confirmation.

Why it matters

For individuals whose information may have been held by the firm, the primary risks are identity theft, fraudulent tax filings, unauthorized access to financial accounts, and social-engineering attacks that exploit knowledge of personal or business finances. Even limited internal files can contain enough detail to make such misuse feasible. Because the number of people affected is unknown, the scope of potential exposure cannot yet be quantified.

For the organization, the incident carries the possibility of regulatory notification obligations, client attrition, legal claims, and the cost of forensic investigation and remediation. Accounting firms operate under professional and, in many jurisdictions, statutory duties to safeguard client data; a ransomware event that includes exfiltration tests those obligations. The absence of Reported Details does not eliminate the practical need for clients and employees to remain alert to unusual account activity or unsolicited communications that reference their relationship with the firm.

Were you affected?

If you are a current or former client, employee, or vendor of Black , Bashor & Porsch, begin by monitoring financial accounts, credit reports, and tax transcripts for unexpected activity. Consider placing fraud alerts with the major credit bureaus and reviewing any recent correspondence from the firm for official guidance. Preserve any notices you receive and document communications carefully. Because the full extent of the data involved remains unconfirmed, treat any unsolicited request for personal or financial information with heightened caution.

Readers can also run a free exposure scan of their email address to check whether that address has already appeared in known breach data sets. Such a scan provides one additional data point and does not replace ongoing vigilance or official notifications from the firm itself. As further verified information becomes available, affected individuals will be better positioned to take targeted protective steps.

AICompiled with AI assistance from public sources and published under our editorial standards.