Qilin ransomware targeted thomasmhughes.com, a US-based legal firm specializing in employee benefits, ERISA, tax, and pension law, exploiting a calculation error. The attack underscores the vulnerability of law firms to cyber extortion #United States
Incident Details
- Victim: thomasmhughes.com
- Country:
- Actor: qilin
- Source: http://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/view?uuid=d9271866-f1e2-3366-a397-ee6400abaed0
- Discovered: 2025-09-26 20:42:31.936465
- Published: 2025-09-26 00:00:00.000000
Information
- The ransomware attack targeted thomasmhughes.com.
- The actor behind the attack is Qilin.
- Thomas M. Hughes, Ltd. is based in the USA.
- The attack was due to a calculation error.
- The company specializes in providing experienced legal counsel focused on employee benefits, ERISA, tax, and pension law.
- With over 30 years of expertise, they offer clear, practical solutions tailored to clientsβ needs.

Disclaimer: This post is based on public claims made by the ransomware group "qilin". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.