Hogan Lovells Cadwalader hacked by Silent Ransom Group; re-attacked after they wouldn’t pay

DataBreaches reports that the Silent Ransom Group, which has hit numerous major law firms this year, breached Hogan Lovells Cadwalader, the firm formed when New York's oldest law firm, Cadwalader, Wickersham & Taft, merged with Hogan Lovells in 2022. The report's key detail is the plural: the firm was attacked more than once, and SRG came back after Hogan Lovells Cadwalader refused to pay.

Law firms concentrate client secrets, deal pipelines, and litigation material, which makes them repeat targets for extortion-focused groups, and SRG has made the sector a running campaign through 2026. The re-attack after a refused payment matters beyond one firm: it signals that paying is treated as an opening bid rather than a conclusion, and that non-payment invites a second attempt rather than a walk-away. Firms that settle quietly rarely disclose this follow-up pattern, so public documentation of it is rare.

Watch for confirmation from Hogan Lovells Cadwalader itself, any leak-site publication of stolen material, and whether the second intrusion used the same access path as the first. The broader question for the sector is whether re-victimization after non-payment becomes a standard SRG tactic against other firms on its list.