scullionlaw.com Listed by blackbasta Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On 29 February 2024, the ransomware group blackbasta listed scullionlaw.com on its leak site, claiming responsibility for a ransomware attack that involved the exfiltration of internal files. Public detail remains limited: the number of people affected is unknown, and independent confirmation of the full scope has not been published. The listing itself is a claim by the group rather than a verified disclosure by the firm.

Scullion Law is a law firm based in Hamilton, Scotland. A breach involving a legal practice raises clear concerns because such organisations routinely handle sensitive client and employee information. What is known so far comes primarily from the group's own statement on its leak site.

What happened

According to the blackbasta listing reported on 29 February 2024, the group claimed to have carried out a ransomware attack against scullionlaw.com and to have exfiltrated internal files. The group stated that the volume of data taken was approximately 155 GB and described the material as including company data, personal employee data, personal documents belonging to users and clients, and confidential documents. No further technical details—such as the initial access method, the precise date of intrusion, or whether systems were encrypted—have been publicly confirmed. The number of individuals whose information may be involved remains unknown.

As with other listings of this type, the appearance of a victim name on a ransomware group's site constitutes an unverified claim until the organisation or independent investigators provide corroboration. No additional official statements detailing the incident have been included in the available record.

The group behind it: blackbasta

Blackbasta is a ransomware operation that has been active since around 2022. Like many modern ransomware groups, it typically follows a double-extortion model: encrypting systems while also stealing data and threatening to publish it if a ransom is not paid. The group has previously listed a range of organisations across multiple sectors on its leak site, using the threat of public release as leverage. Its operators are known to target businesses that hold commercially or personally sensitive information, then post sample claims or full archives when negotiations fail or deadlines pass.

In this case, blackbasta's listing of scullionlaw.com follows that established pattern. The group has asserted that it holds roughly 155 GB of material and has itemised categories of data; those assertions remain claims made by the threat actor rather than independently Reported Facts about this specific incident.

Who is scullionlaw.com?

Scullion Law is a law firm operating from 105 Cadzow Street, Hamilton, ML3 6HG, United Kingdom. The firm describes itself as an award-winning practice focused on expertise and client service, ranking among the top-rated firms in Glasgow and the West of Scotland. Law firms of this kind routinely manage client files, correspondence, financial records, employment documentation and other confidential material as part of ordinary legal work.

A ransomware incident affecting a legal practice is consequential because the organisation sits at the intersection of personal, commercial and privileged information. Clients entrust solicitors with details that can affect litigation, property, family matters and business affairs; employees' personal data is also held for payroll, HR and compliance purposes. Any unauthorised access therefore carries implications beyond the firm itself.

The information in question

The blackbasta listing claims that the exfiltrated material consists of internal files totalling approximately 155 GB and specifically names four categories: company data, personal employees data, personal documents of users and clients, and confidential documents. These descriptions come solely from the group's own statement. The exact contents of the files, the identities of any individuals involved, and whether all of the claimed material is authentic have not been independently confirmed in the public record.

Organisations of this type typically hold client case files, identification documents, financial records, employment contracts, internal correspondence and other sensitive paperwork. Because the precise inventory remains unconfirmed beyond the group's claim, it is not possible to state with certainty which specific records were taken or how many people are affected.

Why it matters

For clients and employees, the practical risk is that personal or confidential information could be misused for identity fraud, targeted phishing, or other forms of social engineering. Even partial exposure of names, addresses, contact details or case-related documents can enable further attacks. For the firm, the incident raises questions of operational disruption, potential regulatory scrutiny under data-protection rules, and the need to support anyone whose information may have been involved.

Because the number of affected people is unknown and the full contents of the claimed archive have not been verified, the scale of individual impact cannot yet be quantified. The listing alone, however, is sufficient reason for anyone who has dealt with the firm to treat the possibility of exposure seriously and to take basic protective steps.

What to do if you're exposed

If you are a current or former client or employee of Scullion Law, monitor financial accounts and credit reports for unusual activity, and be cautious of unexpected emails or calls that reference the firm or personal details. Consider placing fraud alerts with relevant credit-reference agencies and change passwords on any accounts that may have reused credentials linked to the firm. Keep records of any suspicious contact.

Readers can also run a free exposure scan of their email address to check whether their information has already appeared in known breach data sets. This provides an additional, practical way to assess whether personal details have surfaced elsewhere and to decide on further monitoring steps.

AICompiled with AI assistance from public sources and published under our editorial standards.