Hackers Claim To Have Internal Files From Jones Day- One Of The World’s Largest Law Firms
September 22, 2022

Hackers have released files belonging to Jones Day, an American law firm with more than 2,000 attorneys and offices around the world. The hackers claim they obtained these files in June of this year, but the data dump only recently became public.
The hackers claim to have internal files from Jones Day, one of the largest law firms in the world with offices in 11 countries and more than 2,000 attorneys on staff. In a statement released through their Twitter account, the hackers called themselves Anonymous Global (@anonymousglob). Their motive remains unclear and they did not respond to the request for comment by email or over Twitter.
What were they trying to steal?
It is not yet clear why the hackers believed that the law firm would have anything of value for them. It is possible that they were trying to steal private client information. Others believe that there was a more specific target, with someone in the firm sending an email containing an attachment or file that was valuable to someone outside of the company.
Hackers are often able to find these files by guessing employee passwords based on how long they’ve been working at the company, how many characters are in their password, and their age range.
What was the result?
Jones Day is one of the world’s largest law firms. Hackers have revealed that they have acquired some of the firm’s internal files. Although we cannot verify the authenticity of these documents,
if they are legitimate, it would show a rather disappointing lack of security on their part given the sensitive nature of the files that are usually stored at Jones Day, and would be disappointing, to say the least. If they’re fake, then this should prove to be a false alarm. However, if they are real, then there is likely more sensitive data out there waiting to be leaked.
What are we learning from this situation?
Jones Day is one of the world’s largest law firms, which is being hit by a cyber-attack and it appears that hackers have released files from their servers. It does not appear to be limited to just Jones Day but also includes some major corporations.
This data breach was due to a vulnerability found in the website’s server. They were contacted by International Business Times on March 10th with reports of the hack, but their spokesperson said they were unaware of any issue or breach at this time. They are working with law enforcement and legal experts to assess what information may have been accessed.
How could we have prevented this?
- Use two-factor authentication for all staff members, no matter their role. This way, even if someone obtains their password, they’ll still be required to enter a second code from their phone before logging in to the system. This can help detect hack attempts sooner and thwart those who are trying to guess passwords and use them without permission.
2. Require anyone with the ability to access a system–that is, not just firm employees–to periodically change their passwords on both the system and any other applications that rely on it (like email). Hackers might get hold of credentials through one application or service that then lets them log into everything else as well.
How could we fix this if it happened in our firm?
When incidents like this happen, it is important to protect yourself and your clients. You should check to see if you have been impacted by the breach. We recommend locking down your online social media accounts, setting up two-factor authentication,
and being diligent with what information you provide when signing into new services. If you think you may have provided an email address in a public location and there is a chance that that email address may be leaked, change your email address now. Remember: hackers are getting smarter and better at stealing information, so the best way to defend against them is to stay one step ahead of them.
Final thoughts on data security in law firms.
In these days of data breaches, hackers are after just about anything they can get their hands on. Anytime you have an employer that needs your personal information and/or files, it is important to make sure they are securely storing them.
And while we have seen this as a major issue in the financial industry, law firms need to be aware as well. Just because hackers haven’t taken these industries down yet doesn’t mean they won’t in the future. Data security should always be a top priority.
Full legal disclaimer
The files were obtained through the unauthorized access of a third party and have been made available on Wikileaks. Unless explicitly stated, there is no affiliation with or endorsement by WikiLeaks, or any other wiki sites.
Whistleblowers use these disclosures to provide information in support of their claim that they are documenting society as it is. We do not assert, imply, state, or imply in any way whatsoever that we are affiliated with such an organization nor are we encouraging you to unlawfully break confidentiality agreements.
Keep browsing Law Scribd for more updates.