U.S. FEDBreaches and incidents
CrowdStrike says attacks on U.S. law firms surged, including a hired intruder and an Intapp Time Server exploit
CrowdStrike's 2026 Legal Threat Landscape Report says the Chatty Spider extortion group, also tracked as Silent Ransom Group, increased its activity against legal entities 129% in the first eight months of 2026 compared with all of 2024. The group hired a person to pose as IT staff inside a U.S. law firm. The report also says a China-linked group exploited a hardcoded key in Intapp Time Server.
Key points
- Law firms made up nearly 90% of Chatty Spider's victims; the report covers September 2025 to August 2026.The Next Web
- In November 2025 the group hired a Russian national who posed as internal IT staff to install remote-access tools at a U.S. law firm.The Next Web
- Ransomware and extortion groups named 455 legal entities on leak sites, up 39% from 327 a year earlier.The Next Web
- China-linked Titan Panda exploited a hardcoded Intapp Time Server key in April 2026, the first legal-specific software attack CrowdStrike has seen.The Next Web
- CrowdStrike recommends stronger MFA, tight control of remote-access tools and review of default and hardcoded settings.The Next Web
Sources1 article across 1 outlet
Filed under
Breaches and incidentsIntappU.S.Data protectionLegal operationsTechnologyFor practitionersFor vendors