Southwire Sues Anonymous Hacker for Ransomware Attack
Mayer Brown was retained to sue a hacker who encrypted Southwire's files and then published confidential corporate information online after it refused to pay a ransom.
January 02, 2020 at 12:43 PM
4 minute read
A Georgia wire and cable manufacturer has filed a federal lawsuit in Atlanta after its confidential business information was taken and posted online in the wake of a ransomware attack.
The redacted complaint, filed Dec. 31 in the U.S. District Court for the Northern District of Georgia, said the unknown defendant demanded several million dollars to keep the information stolen from Southwire Co. private. The alleged hacker posted the confidential information online after Southwire refused to pay.
Southwire has identified a web portal associated with the December hack, which was redacted from the publicly filed complaint, but has not been able to identify the hacker's identity, according to the suit.
The suit alleges violations of the federal Computer Fraud and Abuse Act and trespass. It asks for a preliminary injunction barring the hacker or hackers and anyone working with them from pursuing the ransom demands and publishing sensitive corporate information online. The suit also seeks to reclaim all copies of the stolen data and an unspecified money judgment that includes disgorgement of the defendant's profits and unspecified compensatory and punitive damages.
The case has been assigned to Judge Timothy Batten.
Southwire is represented by Marcus Christian, a partner at Mayer Brown in Washington, D.C., and associate Jonathan Klein. Christian specializes in cybersecurity and data privacy. Before joining Mayer Brown, Christian was the executive assistant U.S. attorney for the Southern District of Florida and former chief of staff for U.S. Rep. Peter Deutsch of Florida.
Klein referred all questions to Christian, who couldn't be reached for comment.
According to the lawsuit, Southwire's data was taken using Maze Ransomware, which encrypted Southwire's files, causing the company to lose access to data stored on its computer system. Although the suit redacted the dates that Southwire was hacked, the company sent a letter to customers on Dec. 11 notifying them of the Dec. 9 hack attack and warning that company operations might be impacted, according to online publication SC Media.
Attached to the suit is an email sent to Southwire saying, "We hacked your network and now all your files, documents, photos, databases and other important data are safely encrypted with reliable algorithms." The email included instructions for confirming the hack and for paying the ransom to release the files. It also identified the ransomware used as Allied Universal Maze Ransomware.
Southwire's suit redacted the amount of the ransom demanded, but media reports said the hacker demanded 850 bitcoin, or about $6 million.
Southwire's lawsuit also claims that, in addition to releasing confidential information onto a public website, the hacker publicly spread word of the hack. The hacker also set up a public website listing 27 companies that refused to pay its ransom.
Businesses, governments and law firms have frequently become a target of ransomware attacks and data breaches. A 2019 Law.com investigation found more than 100 law firms have fallen victim to data breaches that potentially exposed clients' and employees' personal and financial information over the past five years.
Last summer, hackers infected computers at Georgia's Administrative Office of the Courts, encrypting files and demanding a ransom to release them. In 2018, after the city of Atlanta became one of more than 200 targets of ransomware attacks, a federal grand jury in New Jersey charged two Iranians with developing a form of malicious software known as SamSam, which they used to try to extract bitcoin ransoms from more than 200 hospitals, local governments and other public institutions, according to the U.S. Justice Department.
In 2016, the U.S. attorney's office in Manhattan secured the indictment of three Chinese nationals charged with hacking two major U.S. law firms believed to be Weil, Gotshal & Manges and Cravath, Swaine & Moore, the Law.com investigation found.
This content has been archived. It is available through our partners, LexisNexis® and Bloomberg Law.
To view this content, please continue to their sites.
Not a Lexis Subscriber?
Subscribe Now
Not a Bloomberg Law Subscriber?
Subscribe Now
NOT FOR REPRINT
© 2024 ALM Global, LLC, All Rights Reserved. Request academic re-use from www.copyright.com. All other uses, submit a request to [email protected]. For more information visit Asset & Logo Licensing.
You Might Like
View AllState Jury Awards $160M Verdict for Truck's Defective Design That Left Man With Spinal Cord Injury
Mercedes-Benz Hit With Consumer Class Action for Claims of Defective Wheel Configurations
Child Labor Probe Hammers Tennessee Factory, Highlighting Risks to Employers From Feds' Stepped-Up Enforcement
6 minute readPanel, Affirming $25M Default Judgment, Rules Absent Defendants Must Prove Apportionment
Trending Stories
Who Got The Work
Michael G. Bongiorno, Andrew Scott Dulberg and Elizabeth E. Driscoll from Wilmer Cutler Pickering Hale and Dorr have stepped in to represent Symbotic Inc., an A.I.-enabled technology platform that focuses on increasing supply chain efficiency, and other defendants in a pending shareholder derivative lawsuit. The case, filed Oct. 2 in Massachusetts District Court by the Brown Law Firm on behalf of Stephen Austen, accuses certain officers and directors of misleading investors in regard to Symbotic's potential for margin growth by failing to disclose that the company was not equipped to timely deploy its systems or manage expenses through project delays. The case, assigned to U.S. District Judge Nathaniel M. Gorton, is 1:24-cv-12522, Austen v. Cohen et al.
Who Got The Work
Edmund Polubinski and Marie Killmond of Davis Polk & Wardwell have entered appearances for data platform software development company MongoDB and other defendants in a pending shareholder derivative lawsuit. The action, filed Oct. 7 in New York Southern District Court by the Brown Law Firm, accuses the company's directors and/or officers of falsely expressing confidence in the company’s restructuring of its sales incentive plan and downplaying the severity of decreases in its upfront commitments. The case is 1:24-cv-07594, Roy v. Ittycheria et al.
Who Got The Work
Amy O. Bruchs and Kurt F. Ellison of Michael Best & Friedrich have entered appearances for Epic Systems Corp. in a pending employment discrimination lawsuit. The suit was filed Sept. 7 in Wisconsin Western District Court by Levine Eisberner LLC and Siri & Glimstad on behalf of a project manager who claims that he was wrongfully terminated after applying for a religious exemption to the defendant's COVID-19 vaccine mandate. The case, assigned to U.S. Magistrate Judge Anita Marie Boor, is 3:24-cv-00630, Secker, Nathan v. Epic Systems Corporation.
Who Got The Work
David X. Sullivan, Thomas J. Finn and Gregory A. Hall from McCarter & English have entered appearances for Sunrun Installation Services in a pending civil rights lawsuit. The complaint was filed Sept. 4 in Connecticut District Court by attorney Robert M. Berke on behalf of former employee George Edward Steins, who was arrested and charged with employing an unregistered home improvement salesperson. The complaint alleges that had Sunrun informed the Connecticut Department of Consumer Protection that the plaintiff's employment had ended in 2017 and that he no longer held Sunrun's home improvement contractor license, he would not have been hit with charges, which were dismissed in May 2024. The case, assigned to U.S. District Judge Jeffrey A. Meyer, is 3:24-cv-01423, Steins v. Sunrun, Inc. et al.
Who Got The Work
Greenberg Traurig shareholder Joshua L. Raskin has entered an appearance for boohoo.com UK Ltd. in a pending patent infringement lawsuit. The suit, filed Sept. 3 in Texas Eastern District Court by Rozier Hardt McDonough on behalf of Alto Dynamics, asserts five patents related to an online shopping platform. The case, assigned to U.S. District Judge Rodney Gilstrap, is 2:24-cv-00719, Alto Dynamics, LLC v. boohoo.com UK Limited.
Featured Firms
Law Offices of Gary Martin Hays & Associates, P.C.
(470) 294-1674
Law Offices of Mark E. Salomone
(857) 444-6468
Smith & Hassler
(713) 739-1250