Science & Tech · Cybersecurity · 2 days ago
Silent Ransom Group Claims $207 Million in Payments from 27 Law Firms
Silent Ransom Group allegedly collected about $207 million from 27 law firms between April and September 2026.
The group reportedly relied on phone calls and social engineering to trick people into giving access or handing over files, rather than locking files with malware.
A leak of chats from two of the group’s servers covers about 13 months and includes ransom discussions and plans for targeting victims.
The group’s records list a median payment of $6 million, while the largest named payment was $30 million from White & Case.
Crystal Intelligence said cryptocurrency records support the operation’s overall scale but do not confirm the exact amounts.
Public disclosures by Blank Rome and Goodwin Procter describe incidents involving employees being tricked, which are consistent with the group’s reported methods.
The chats also describe how payments were moved and show that the operators did not always follow their own rules for avoiding detection.
Leaked internal chats indicate Silent Ransom Group claimed it received about $207 million from 27 law firms between April and September 2026.
The group allegedly used phone calls and social engineering rather than encrypting files.
Crystal Intelligence said blockchain evidence supports the operation’s overall scale but does not confirm the exact amounts.
The leaked chats cover about 13 months and contain 5,692 messages.
The reported payments had a median of $6 million, while the largest was $30 million from White & Case.
- Who
- Silent Ransom Group allegedly extorted 27 law firms.
- What
- The group’s internal records claim the firms paid about $207 million in ransom.
- When
- The claimed payments were made between April 3 and September 24, 2026.
- Where
- The affected law firms’ locations are not stated. The chats came from two of the group’s servers.
- Why
- The group allegedly used phone calls and social engineering to obtain ransom payments.
This story does not have two clearly opposing sides.
The leaked chats from two of the group’s servers cover about 13 months.
The group’s internal deal board claimed 27 firms paid about $207 million.
DataBreaches cross-referenced nine named victims against public breach disclosures.
Security Affairs published its report on the leaked chats and the alleged extortion.
- Named group
- Silent Ransom Group
- Law firms
- 27
- Claimed payments
- About $207 million
- Chat messages
- 5,692
- Median payment
- $6 million
- Largest reported payment
- $30 million from White & Case
What people are saying
The leak was first shared with this site by Tammy Harper as an onion site with 5,692 chat messages that discuss victim payments, possible access methods, approaches to future victims, the purchase of an apartment in Moscow by one of the members, and discussions of guns and drones, among other topics.
The group’s internal deal board claims about $207M paid by 27 firms between April 3 and September 24, 2026. On-chain evidence supports the scale but not the exact figures.
Many smaller payments went straight to regulated exchanges, where accounts are tied to verified identities.
Sources
Related news
Canadian cybersecurity executive arrested on federal extortion charges
Attackers target critical SonicWall SMA 1000 flaw days after disclosure
Cyberattack defrosts refrigerators at French supermarket chains
Hackers take over Brazil’s Ancine website with political messages
Flock gains authority to assign vulnerability IDs for its own products
DDoS attack disrupts Canonical websites for more than four hours
China warns of laser-based eavesdropping through glass windows
Malware incident at contractor may expose 8.7 million karaoke records
Ledger confirms tampered wallets linked to CryptoBilis fund thefts
Canadian cybersecurity executive arrested in FBI ShinyHunters investigation
Albert Heijn outage may be linked to a cyberattack, experts say
