Jones Day Hit by Phishing Attack, Client Data Accessed in Breach Claimed by Cybercriminal Group Global law firm Jones Day confirmed a phishing attack in which hackers accessed files belonging to 10 clients, a breach later claimed by the cybercriminal group Silent. The incident, disclosed on Monday, involved unauthorized access to a limited set of dated client documents, according to a statement from spokesperson Dave Petrou. All affected clients have since been notified, though their identities remain undisclosed. Silent, a known extortion-focused threat group, listed Jones Day as a victim on its dark web leak site, taking credit for the attack. The firm, which has previously faced cybersecurity incidents including a 2021 breach with undisclosed details represents high-profile clients such as Goldman Sachs, McDonald’s, and General Motors. No further information on the scope of the compromised data or the timeline of the attack has been released. The incident underscores the persistent targeting of legal firms by cybercriminals seeking sensitive corporate information.

Russian-Linked Hackers Breach Over 170 Ukrainian Email Accounts in Espionage Campaign A coordinated cyber campaign attributed to Russian-linked hackers compromised at least 170 email accounts belonging to Ukrainian prosecutors, investigators, and government officials between September 2024 and March 2026. The operation, revealed by Reuters on April 15, targeted key institutions involved in anti-corruption efforts and investigations into Russian collaborators, including the Specialized Anti-Corruption Prosecutor’s Office, the Asset Recovery and Management Agency, and the Prosecutor Training Center in Kyiv. The breach was uncovered after researchers at Ctrl-Alt-Intel, a UK- and US-based cyber threat group, accessed a dataset inadvertently exposed by the hackers, containing logs of successful intrusions and thousands of stolen emails. Analysts described the leak as a "major operational failure" by the attackers. In total, 284 email accounts were compromised, with the majority in Ukraine, though the campaign also extended to Romania, Greece, Bulgaria, and Serbia. Among the victims were 44 accounts at the Prosecutor Training Center, including that of deputy director Oleh Duka, as well as a senior anti-corruption official linked to high-profile investigations. Additional targets included a municipal hospital in Pokrovsk and a local finance committee, suggesting broader infiltration beyond central government bodies. Outside Ukraine, the operation breached 67 accounts tied to the Romanian Air Force, some linked to NATO airbases, and 27 accounts belonging to Greece’s General Staff of National Defense. Researchers believe the campaign aimed to monitor investigations into Russian espionage or extract sensitive information on Ukrainian officials. The disclosure follows a recent joint operation by Ukraine’s Security Service (SBU), the FBI, and European partners, which disrupted a GRU-linked cyber operation exploiting vulnerable Wi-Fi routers to intercept data. The effort dismantled over 100 servers and removed hundreds of routers from Russian control.