SHIBLEY RIGHTON Listed by alphv Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

Ransomware groups continue to target professional services firms, listing victims on leak sites as leverage after claiming to steal data. In this environment, even a single listing can signal real risk for clients and staff whose information may have been taken. On January 11, 2024, the law firm SHIBLEY RIGHTON appeared on a listing associated with the alphv ransomware group, which claimed internal files had been exfiltrated.

Public detail remains limited: the number of people affected is unknown, and the precise contents of the files have not been disclosed. What is known is that a full-service law firm was named in connection with a ransomware incident involving data theft. For anyone who has dealt with the firm, that claim alone warrants careful attention.

What happened

According to available reporting, SHIBLEY RIGHTON was listed by the alphv ransomware group on or around January 11, 2024. The group claims that internal files were exfiltrated as part of a ransomware attack. No public confirmation of the attack method, the exact timing of any intrusion, the volume of data taken, or whether systems were encrypted has been provided in the facts available. The number of individuals potentially affected is unknown. The listing itself is a claim by the threat actor; independent verification of the full scope has not been detailed in the public record used here.

Who is alphv?

alphv, also widely known as BlackCat, is a ransomware group that has operated for several years using a ransomware-as-a-service model. Affiliates typically gain access to networks, steal data, and deploy encryption, then pressure victims by threatening to publish the stolen material on dedicated leak sites. The group has been linked to numerous attacks across sectors including professional services, healthcare, and manufacturing. Its operators have historically demanded ransoms and used double-extortion tactics—combining encryption with data theft. In this case, the group claims SHIBLEY RIGHTON as a victim and asserts that internal files were taken; those assertions should be treated as unverified claims unless independently confirmed.

About SHIBLEY RIGHTON

SHIBLEY RIGHTON LLP is a full-service law firm. It specializes in business law, civil and commercial litigation, immigration law, personal injury, and related practice areas. Law firms of this type routinely handle confidential client matters, contracts, litigation files, personal identification documents, immigration records, and financial or medical details connected to cases. A breach at such an organization is consequential because the data involved is often highly sensitive, subject to professional confidentiality obligations, and useful to criminals for identity fraud, targeted scams, or further social engineering. Clients, opposing parties, employees, and others whose information appears in firm systems can be affected even if they never interacted with the firm’s technology directly.

What was likely exposed

The available facts state that internal files were exfiltrated in a ransomware attack. Specific data types beyond that description are not disclosed, and the number of people affected remains unknown. Organizations of this kind typically hold client correspondence, case files, contracts, personal identifiers, immigration documents, injury-related records, billing information, and internal administrative materials. It is not confirmed which, if any, of those categories were among the files claimed to have been taken. Exact contents are therefore unconfirmed; readers should treat any assumption about particular documents as speculative until further official detail emerges.

What's at stake

For individuals whose information may have been among the internal files, the practical risks include identity theft, fraudulent account openings, phishing or spear-phishing that references real case details, and misuse of personal or immigration-related data. Law-firm records can contain enough context for convincing social-engineering attacks. For the firm itself, the stakes include potential regulatory scrutiny, client notification obligations, reputational harm, and the operational cost of investigation and remediation. Because the scale and exact data types remain undisclosed, the full extent of exposure cannot yet be quantified; the uncertainty itself creates ongoing risk for anyone connected to the firm’s work.

What to do if you're exposed

If you are a current or former client, employee, or otherwise connected to SHIBLEY RIGHTON, treat the listing as a reason to increase vigilance. Monitor financial accounts and credit reports for unexpected activity, enable multi-factor authentication on important accounts, and be skeptical of unsolicited emails or calls that reference legal matters or personal details. Consider placing fraud alerts with credit bureaus if you believe sensitive identifiers may have been involved. Keep records of any official notifications you receive from the firm. Readers can also run a free exposure scan of their email address to check whether their information has already surfaced in known breach data sets, which can help prioritize further protective steps.

AICompiled with AI assistance from public sources and published under our editorial standards.