Cyber Threat Actor: SilentRansomGroup

SilentRansomGroup, also tracked as Silent Ransom Group, is a threat actor that has been publicly linked to cyber incidents targeting United States‑based law firms. The actor’s aliases appear in open‑source reports and legal filings that describe intrusions resulting in the exposure of client information. These references establish the group’s focus on the legal services sector and its activity within the United States, specifically noting incidents that led to litigation in the Eastern District of Pennsylvania.

In April 2026, the Silent Ransom Group was identified as the perpetrator behind an attack on Jones Day, during which data belonging to ten of the firm’s clients was posted publicly. The incident highlighted how threat actors can leverage the sensitive nature of legal client data to generate publicity and pressure, though the reports did not detail any ransom demand or extortion message. The exposure prompted discussion about the ethical and legal obligations of law firms to safeguard confidential information and attracted attention from commentators on breach‑notice requirements.

A month later, in May 2026, Fox Rothschild LLP became the subject of a lawsuit filed by a plaintiff who alleged that the firm failed to adequately protect her data during a cyberattack attributed to SilentRansomGroup, potentially exposing her Social Security number. The lawsuit referenced a public report by HookPhish that outlined the attack’s details, while the firm acknowledged the intrusion without disclosing technical specifics. The case was filed in the US District Court for the Eastern District of Pennsylvania, underscoring the actor’s continued focus on legal entities and the resulting legal consequences for victims of data exposure. Together, these two publicly documented episodes illustrate a pattern in which SilentRansomGroup targets law firms, leading to the disclosure of client data and subsequent legal scrutiny.