Troutman Pepper Locke

Summary

Troutman Pepper Locke, a large Atlanta law firm, experienced a data breach after an employee fell for a social engineering attack that exposed private information of approximately 37,000 individuals. The firm engaged a cybersecurity specialist, notified the FBI, and is now facing a proposed class action lawsuit seeking compensation for the affected parties.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

Troutman Pepper Locke, a law firm headquartered in Atlanta with more than 1,600 attorneys across over 30 offices, experienced a data breach that began on August 7. The firm is described as one of Atlanta’s largest and oldest law firms. The firm attributed the breach to this employee interaction. According to the firm’s statement released on the following Monday, an employee was targeted by a social engineering attack and interacted with communications that appeared legitimate but were not. This interaction prompted the firm to initiate its internal security procedures.

Following the employee’s interaction, Troutman Pepper Locke engaged a cybersecurity specialist to investigate the incident and concurrently notified the Federal Bureau of Investigation. The firm disclosed these actions in its conversation with The Atlanta Journal-Constitution. The firm’s statement indicated that these steps were taken to assess the scope of the exposure and to coordinate with law enforcement. No further technical details about the systems affected or the specific data compromised were disclosed in the statement.

The breach allegedly exposed private information of approximately 37,000 individuals, placing them at risk of fraud and identity theft. On the Thursday after the statement, a West Virginia resident filed a proposed class action lawsuit in federal court in Atlanta, claiming to be one of those affected and seeking compensation for the alleged harm. The lawsuit was filed on the Thursday following the firm’s statement. The lawsuit underscores the potential legal and financial consequences stemming from the incident.

Sources

Sources available to members: 1 source.