www.gannons.co.uk Listed by apt73 Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

Ransomware groups continue to target professional-services firms across the UK and Europe, combining network intrusion with data theft and public leak-site pressure. Law practices sit high on many threat actors’ lists because they hold concentrated volumes of client, commercial and personal information. Against that backdrop, the June 2024 listing of www.gannons.co.uk by the group known as apt73 fits a familiar pattern of claimed double-extortion attacks.

Public reporting indicates that Gannons Commercial Law Limited, trading as www.gannons.co.uk, was named on an apt73 leak site after an alleged ransomware incident involving the exfiltration of internal files. The number of people affected remains unknown, and independent confirmation of the full scope has not been published. The listing itself is a claim by the group rather than a verified disclosure by the firm.

What happened

On or around 14 June 2024, the ransomware group apt73 listed www.gannons.co.uk among its claimed victims. According to the available report, the group stated that internal files had been exfiltrated during a ransomware attack. No further public detail has been released on the precise date of intrusion, the initial access method, the volume of data taken, or whether encryption was also deployed. The number of individuals potentially affected is recorded as unknown. The firm has not, in the material available, issued a detailed public statement confirming or disputing the listing.

Inside apt73

apt73 is one of a number of ransomware operations that practise double extortion: after gaining access to a network they claim to steal data before encrypting systems, then threaten to publish the stolen material if a ransom is not paid. Like other groups in this category, apt73 maintains a leak site on which it posts victim names and, in some cases, sample files or larger archives. Public reporting on the group describes typical tactics that include phishing or exploitation of remote-access services, lateral movement inside the network, and the use of commodity or custom ransomware payloads. Prior activity attributed to apt73 and similar actors has focused on mid-sized professional and commercial organisations rather than exclusively on large enterprises. In this instance the group claims to have taken internal files from Gannons; that claim has not been independently verified in open sources.

www.gannons.co.uk and its sector

Gannons Commercial Law Limited is a UK commercial-law practice. Public descriptions of the firm note its origins with founder Catherine Gannon and its focus on commercial, employment and related advisory work for businesses and individuals. Law firms of this type routinely handle client contracts, correspondence, financial information, employment records and personal data belonging to both corporate clients and private individuals. Because legal professional privilege and confidentiality sit at the centre of the solicitor–client relationship, any unauthorised access to a firm’s systems raises particular concerns about the integrity of that relationship and the potential for secondary misuse of the material. A claimed breach at a commercial-law practice therefore carries consequences that extend beyond the firm itself to the clients and counterparties whose information may have been stored on its systems.

What data was at risk

The only data type named in the available report is “internal files” said to have been exfiltrated in a ransomware attack. Exact contents, file counts and whether any client or personal data were included remain undisclosed and unconfirmed. Organisations of this kind typically hold a mix of matter files, emails, contracts, identity documents, financial records and employee information. Without a confirmed inventory from the firm or from independent forensic reporting, it is not possible to state which of those categories, if any, were actually taken. Readers should therefore treat any specific claims about the nature of the data as unverified until further detail is published.

What's at stake

For individuals whose information may have been among the internal files, the practical risks include identity fraud, targeted phishing that leverages knowledge of legal matters, and the possible exposure of sensitive personal or commercial details. For corporate clients the stakes include competitive harm if confidential deal or employment information surfaces, and the administrative burden of reviewing and responding to any subsequent notifications. For the firm itself the consequences can include regulatory scrutiny under UK data-protection rules, reputational damage, and the cost of investigation and remediation. Because the number of people affected is unknown and the precise data set is unconfirmed, the scale of these risks cannot yet be quantified.

What to do if you're exposed

Anyone who has dealt with Gannons Commercial Law Limited and is concerned that their information may have been involved can take a small number of practical steps while waiting for further official detail.

• Monitor bank and credit accounts for unexpected activity and consider a credit freeze or fraud alert if you hold accounts in the UK or elsewhere.
• Treat unsolicited emails or calls that reference legal matters or personal details with caution; verify any request through a known, independent channel.
• Change passwords on any accounts that may have shared credentials with systems used in professional correspondence, and enable multi-factor authentication where available.
• Keep records of any notifications you receive from the firm or from regulators so you can act promptly if further guidance is issued.
• Run a free exposure scan of your email address against known breach data sets to see whether your details have already appeared in other incidents; this does not confirm involvement in the Gannons listing but can highlight existing exposure.

Public information on this incident remains limited. Further clarity will depend on any statements the firm or relevant authorities choose to release.

AICompiled with AI assistance from public sources and published under our editorial standards.