gannons.co.uk Listed by apt73 Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

Ransomware groups continue to pressure professional-services firms by stealing internal material and threatening publication, a pattern that has become a steady feature of the current threat landscape. Law practices sit high on that list because the documents they hold are often commercially sensitive and personally identifiable.

On 1 November 2023, the ransomware group known as apt73 listed gannons.co.uk on its leak site, claiming a successful attack against Gannons Commercial Law Limited in which internal files were exfiltrated. The number of people affected remains unknown, and public detail beyond the listing itself is limited. For clients, counterparties and staff, the claim alone is enough to warrant careful attention.

Breaking down the breach

According to the available record, gannons.co.uk was listed by the apt73 ransomware group on 1 November 2023. The organisation is identified as Gannons Commercial Law Limited. The sole concrete description of what occurred is that internal files were allegedly exfiltrated in a ransomware attack. No confirmed figure for the volume of data, no technical account of the initial access method, and no independent verification of the listing have been supplied in the public summary. The number of individuals affected is recorded as unknown. Beyond the group’s claim on its leak site, further operational detail is undisclosed.

Who is apt73?

apt73 is a ransomware actor that operates in the familiar double-extortion model used by many contemporary groups: encrypt systems where possible, exfiltrate data, and threaten to publish or auction the material if a ransom is not paid. Like other groups in this category, it maintains a leak site on which it names victims and, in some cases, releases samples or larger archives to increase pressure. Public reporting on apt73 has associated it with opportunistic targeting of organisations that hold commercially or personally valuable records rather than with highly selective, nation-state-style campaigns. Specific claims the group has made about this particular victim are limited to the leak-site listing itself; those claims should be treated as unverified assertions unless corroborated by the organisation or by independent investigation.

Who is gannons.co.uk?

Gannons Commercial Law Limited is a United Kingdom commercial law practice. Firms of this type routinely handle contracts, corporate transactions, employment matters, intellectual-property work and tax-related advice. The practice’s public profile includes association with Catherine Gannon, who earlier worked as a tax solicitor at a large US law firm. Because legal work necessarily involves correspondence, drafts, client instructions and supporting evidence, a breach at such an organisation raises immediate questions about the confidentiality of client matters and the security of any personal data processed in the course of those matters. The consequential nature of a law-firm incident stems less from the size of the firm than from the sensitivity of the material it is trusted to hold.

What was likely exposed

The facts state only that internal files were exfiltrated in a ransomware attack. No inventory of file types, no confirmation of client names, and no breakdown of personal versus purely corporate records have been published. Organisations in the commercial-law sector typically retain, among other things, client contact details, matter files, contracts, financial and billing records, employee information and privileged correspondence. Whether any or all of those categories were present in the material claimed by apt73 is unconfirmed. Readers should therefore treat any assertion about precise data elements as speculative until the firm or a regulator provides a clearer account.

The real-world impact

For individuals whose information may have been among the internal files, the practical risks include unwanted contact, attempts at fraud that reference genuine matter details, and the longer-term possibility that personal data could be reused in phishing or identity-related schemes. For the firm, the consequences centre on client confidence, potential regulatory notification duties under UK data-protection law, and the operational cost of investigation and remediation. Because the scale of the incident and the exact contents of the exfiltrated files remain unknown, the severity for any single person cannot yet be quantified; the prudent stance is to assume that material linked to recent or ongoing matters could be involved until clearer information emerges.

What to do if you're exposed

If you have been a client, employee or regular contact of Gannons Commercial Law Limited, consider the following immediate steps:

• Monitor bank and credit accounts for unfamiliar activity and enable available transaction alerts.
• Treat unexpected emails, calls or messages that reference legal matters or personal details with caution; verify through a known official channel before responding.
• Change passwords on any accounts that may have shared credentials or recovery addresses linked to the firm, and enable multi-factor authentication where it is offered.
• Retain any formal notification you receive from the firm or from a regulator; it will contain the most accurate description of what was involved.
• Run a free exposure scan of your email address to check whether your information has already surfaced in known breach data sets.

Public detail on this incident remains limited. Further clarity, if it comes, is most likely to arrive through official statements from the firm or from supervisory authorities rather than from the threat actor’s leak site.

AICompiled with AI assistance from public sources and published under our editorial standards.