Science & Tech · Cybersecurity · 1 day ago
Silent Ransom Group Claims $207 Million in Payments from 27 Law Firms
Silent Ransom Group allegedly collected about $207 million from 27 law firms between April and September 2026.
The group reportedly relied on phone calls and social engineering to trick people into giving access or handing over files, rather than locking files with malware.
A leak of chats from two of the group’s servers covers about 13 months and includes ransom discussions and plans for targeting victims.
The group’s records list a median payment of $6 million, while the largest named payment was $30 million from White & Case.
Crystal Intelligence said cryptocurrency records support the operation’s overall scale but do not confirm the exact amounts.
Public disclosures by Blank Rome and Goodwin Procter describe incidents involving employees being tricked, which are consistent with the group’s reported methods.
The chats also describe how payments were moved and show that the operators did not always follow their own rules for avoiding detection.
Leaked internal chats indicate Silent Ransom Group claimed it received about $207 million from 27 law firms between April and September 2026.
The group allegedly used phone calls and social engineering rather than encrypting files.
Crystal Intelligence said blockchain evidence supports the operation’s overall scale but does not confirm the exact amounts.
The leaked chats cover about 13 months and contain 5,692 messages.
The reported payments had a median of $6 million, while the largest was $30 million from White & Case.
- Who
- Silent Ransom Group allegedly extorted 27 law firms.
- What
- The group’s internal records claim the firms paid about $207 million in ransom.
- When
- The claimed payments were made between April 3 and September 24, 2026.
- Where
- The affected law firms’ locations are not stated. The chats came from two of the group’s servers.
- Why
- The group allegedly used phone calls and social engineering to obtain ransom payments.
This story does not have two clearly opposing sides.
The leak was first shared with this site by Tammy Harper as an onion site with 5,692 chat messages that discuss victim payments, possible access methods, approaches to future victims, the purchase of an apartment in Moscow by one of the members, and discussions of guns and drones, among other topics.
The group’s internal deal board claims about $207M paid by 27 firms between April 3 and September 24, 2026. On-chain evidence supports the scale but not the exact figures.
Many smaller payments went straight to regulated exchanges, where accounts are tied to verified identities.
The leaked chats from two of the group’s servers cover about 13 months.
The group’s internal deal board claimed 27 firms paid about $207 million.
DataBreaches cross-referenced nine named victims against public breach disclosures.
Security Affairs published its report on the leaked chats and the alleged extortion.
- Named group
- Silent Ransom Group
- Law firms
- 27
- Claimed payments
- About $207 million
- Chat messages
- 5,692
- Median payment
- $6 million
- Largest reported payment
- $30 million from White & Case
Sources
Related news
Canadian cybersecurity negotiator arrested in ShinyHunters investigation
US seizes two China-linked hacking tools used against critical infrastructure
Anthropic offers free AI vulnerability scans to open-source projects
FBI arrests another suspect linked to ShinyHunters jobs-site breach
Canadian cybersecurity executive arrested on extortion-related charges
Illinois college says Flock refused to remove its cameras before contract ended
AI-assisted attacks hit South Korean financial institutions
Ricardo data breach affects about 890,000 user accounts
Account linked to Chinese DDoS group in probe of attacks on South Korean finance
Thousands of GPU servers exposed monitoring data, with hundreds vulnerable to crashes
Security Affairs launches weekly AI and cybersecurity newsletter
