Grubman Shire Meiselas & Sacks and the Lady Gaga Data Leak

**Executive summary:** A REvil ransomware attack against law firm Grubman Shire Meiselas & Sacks resulted in the theft of roughly 756 GB of sensitive client data, multi-million-dollar ransom demands (reported $21M doubled to $42M), and public leaks of celebrity documents; the report outlines likely delivery via malicious email attachments and emphasizes the need for multi-layered defensive controls for law firms.