A Scottish law firm has become the victim of a cyber attack by a Russian ransomware operator.


Scullion Law, which has offices on George Street Edinburgh, as well as in Glasgow, Hamilton and Madrid, had 155GB of data stolen in the attack by Black Basta.

A spokesperson for the award-winning firm said: “We can confirm that we were recently the victim of a cyberattack.

“We promptly notified the ICO and The Law Society of Scotland, and have been working with the police, external IT and legal experts.

“In compliance with our obligations, we promptly notified those individuals whose data is known to have been affected. Thanks to the hard work of our team, we have been able to overcome the attack and our business is fully operational.

“As there is an ongoing police enquiry, we are not able to provide any further information.”

The cyberattackers posted a series of screenshots showing what it had seized, as reported in Scottish Legal News.

Jude McCorry, CEO of Cyber and Fraud Centre – Scotland, said: “We are very concerned with the level of cyberattacks that have been occurring over the last few weeks affecting Scottish companies — and are urging organisations to make themselves as cyber resilient as possible, and also to think of the data that they are custodians of and what would happen if this data was leaked or sold on the dark web.”

A Police Scotland spokesperson said: “We received a report of a cyber incident having impacted a company based in Hamilton, on Wednesday, 21 February, 2024.

“Enquiries are ongoing.”