Jones Day Hit by Phishing Attack, Client Data Accessed in Breach Claimed by Cybercriminal Group
Global law firm Jones Day confirmed a phishing attack in which hackers accessed files belonging to 10 clients, a breach later claimed by the cybercriminal group Silent. The incident, disclosed on Monday, involved unauthorized access to a limited set of dated client documents, according to a statement from spokesperson Dave Petrou. All affected clients have since been notified, though their identities remain undisclosed.
Silent, a known extortion-focused threat group, listed Jones Day as a victim on its dark web leak site, taking credit for the attack. The firm, which has previously faced cybersecurity incidents including a 2021 breach with undisclosed details represents high-profile clients such as Goldman Sachs, McDonald’s, and General Motors.
No further information on the scope of the compromised data or the timeline of the attack has been released. The incident underscores the persistent targeting of legal firms by cybercriminals seeking sensitive corporate information.
Jones Day cybersecurity rating report: https://www.rankiteo.com/company/jones-day
General Catalyst cybersecurity rating report: https://www.rankiteo.com/company/general-catalyst
McDonald's cybersecurity rating report: https://www.rankiteo.com/company/mcdonald's-corporation
Goldman Sachs cybersecurity rating report: https://www.rankiteo.com/company/goldman-sachs
"id": "JONGENMCDGOL1775507547",
"linkid": "jones-day, general-catalyst, mcdonald's-corporation, goldman-sachs",
"type": "Breach",
"date": "4/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '10 clients',
'industry': 'Legal Services',
'name': 'Jones Day',
'type': 'Law Firm'}],
'attack_vector': 'Phishing',
'data_breach': {'sensitivity_of_data': 'Sensitive corporate information',
'type_of_data_compromised': 'Client documents'},
'description': 'Global law firm Jones Day confirmed a phishing attack in '
'which hackers accessed files belonging to 10 clients, a '
'breach later claimed by the cybercriminal group *Silent*. The '
'incident involved unauthorized access to a limited set of '
'dated client documents. All affected clients have been '
'notified.',
'impact': {'data_compromised': 'Client documents'},
'motivation': 'Extortion',
'references': [{'source': 'Jones Day Statement'}],
'response': {'communication_strategy': 'Affected clients notified'},
'threat_actor': 'Silent',
'title': 'Jones Day Hit by Phishing Attack, Client Data Accessed in Breach '
'Claimed by Cybercriminal Group',
'type': 'Phishing Attack'}