A Glasgow law firm has called in the police after falling victim to a cyberattack.
Scullion LAW – headquartered in the city – has been working to fend off a suspected ransomware incident on February 29.
The company, which has remote working locations and offices in Scotland and Spain, is believed to have been targeted by the Russian-speaking ‘Black Basta’ gang.
The firm, which has offices in Hamilton, Edinburgh and Madrid, is a specialist in legal services, spanning road traffic law, to criminal, property and family law.
The Black Basta gang posted details of the hack on its dark web site, and claims to have stolen 155 gigabytes of data.
As a result the firm – established in 1979 – has called in Police Scotland, IT and legal experts and notified the Information Commissioner and the Law Society of Scotland.
A company spokesperson said: “We can confirm that we were recently the victim of a cyber-attack.
“We promptly notified the ICO and the Law Society of Scotland, and have been working with the police, external IT and legal experts.
“In compliance with our obligations, we promptly notified those individuals whose data is known to have been affected.
“Thanks to the hard work of our team, we have been able to overcome the attack and our business is fully operational.
“As there is an ongoing police enquiry, we are not able to provide any further information.”
Black Basta claims to have gained access to company data, personal data as well as that belonging to clients. It posted a series of screenshots showing what it had seized.
Jude McCorry, CEO of Cyber and Fraud Centre – Scotland, said: “We are very concerned with the level of cyberattacks that have been occurring over the last few weeks affecting Scottish companies – and are urging organisations to make themselves as cyber resilient as possible, and also to think of the data that they are custodians of and what would happen if this data was leaked or sold on the dark web.
“If anyone would advice on how to protect themselves please get in contact with us at the Cyber and Fraud Centre, and also if they find themselves a victim of a cyber or ransomware attack to contact our incident response line on 0800 1670623.”
A Police Scotland spokesperson said: “We received a report of a cyber incident having impacted a company based in Hamilton, on Wednesday, 21 February, 2024.”
