Silent Ransom Group leaked another big law firm: Orrick, Herrington & Sutcliffe

The report describes how the extortion group known as Silent Ransom Group (SRG) accessed Orrick, Herrington & Sutcliffe LLP in January 2026, exfiltrated sensitive client and employee files, negotiated for ransom (offers and counteroffers documented between February 6–23, 2026), and ultimately published the stolen data on a clear‑web leak site after rejecting Orrick's offers. SRG reportedly used no malware but relies on phishing and social engineering; the leak included many plaintext confidential files and demonstrates recurring targeting of large law firms (including prior incidents such as Jones Day).