Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Logo

Magna Legal Services

magnals.com
Group Storm
Discovered 2026-09-26 08:48 UTC
Est. attack date 2026-09-24
Country US
Sector
Agriculture and Food Production Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Description:

Magna Legal Services is a nationwide provider of comprehensive litigation support and legal services, serving law firms, corporations, insurance companies, and government organizations. Founded in 2007 and headquartered in Philadelphia, Pennsylvania, the company supports clients throughout the entire litigation process. Its services include court reporting, deposition services, medical record retrieval, jury consulting, trial presentation, legal graphics, video production, investigations, service of process, interpreting and translation, and virtual proceedings. Magna combines legal expertise with technology to help attorneys manage complex cases efficiently. The company has expanded its national presence through strategic acquisitions and currently operates across numerous locations throughout the United States. The company headquarters is located in 1635 Market Street, 8th Floor, Philadelphia, PA 19103, United States. 501-1000 Employees
Infostealer activity detected by HudsonRock

Compromised Employees: 0

Compromised Users: 0

Third Party Employee Credentials: 4

External Attack Surface: 0

Exposure Report
by ParanoidLab
377
Passwords
15 critical
91
Cookies
0 critical
Last queried 2026-09-26 08:51 UTC

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • registrar-abusecloudflare.com
MX Records
  • us-smtp-inbound-2.mimecast.com. Mimecast
  • us-smtp-inbound-1.mimecast.com. Mimecast
TXT Records
  • jjd7esic2tmbmcutkuh867efjf
  • google-site-verification=MqVx4KbtYn_ZYGDTG5dbh_Nli1qm5WI-8p37MSZY-Yc
  • anthropic-domain-verification-k4xf2n=skNTvfwjy58IRkgRTkUMAlV8H
  • 2l3lfd8fj4eobshtoeqm40dolr
  • tqif23vvvdbgg3ne2042kpk5r0
  • ms-domain-verification=95e1916c-63b0-4054-9eb9-9e3901553356
  • apple-domain-verification=FnyCP1GzF8n5NiE3
  • google-site-verification=s859iMzaBf_ZGcnQqtCxfQOd-vENeTQTH6lkOxdj8Ho
  • v=spf1 redirect=25ogfra0._spf._d.mim.ec
  • box-domain-verification=fa9cda4e71d0aba8c3879879a75578bad1b7fa6eb12d3f386c760b8535f315c0
  • atlassian-domain-verification=gwV0vt5VS/KeGhkxeHu4a0EpAzY8CwT9rZ8tonqLXhzpMVt47YVA0uSXawN8WhXk
  • duo_sso_verification=0p9Kd0hkx5pFnCUUdCXD6FRL3oklQM3WFeGjjpCZY5d8o5Oymrh9TcNmzYRs8ZGF
  • 12j4vrc2cmvjqg65f1l3l6nkge
  • pardot969213=e5e423cf61b86e8eee36892ffe2cc5b04dd876b9adf994bf14c52bd7c275cd42
  • ZOOM_verify_cTnHdpiVyJtn5j2SB3Zg5H
  • intacct-esk=D23FE0991894E3ABE0539A220D0AF65C
  • duo_sso_verification=WSlE2MwSw5zAUkiB2XYGMweSL2m5ZcOCq1qDHgIpA2c05LX46oHDgGbCEajLO1uh
  • facebook-domain-verification=17rduuyztqxd6kkb9bw67ztm41rly9
  • openai-domain-verification=dv-rR3atSvUTxODBttBVWfhaMPD
  • 0ed1fe018a76c8c387c7774d53b3b10101092fe9a2
  • 00DE0000000ICYG=1TBRb00000000cj
  • docusign=ff29eb9f-7607-4d9a-835a-61ddfd6aaf18
  • monday-com-verification=H5fTHbNPpsVrLdQgPqnjItJO28Op45U8ySwG52dhytg
  • atlassian-sending-domain-verification=1c812dcf-55c0-4c98-9e9c-ec2d307def4d
Cloud / SaaS Services Detected
Anthropic Apple Atlassian Box Cisco Duo DocuSign Mimecast Monday OpenIA Sage Salesforce Zoom

Leak Screenshot:

Leak Screenshot

Legal Disclaimer: Ransomware.live does not engage in the acquisition, exfiltration, downloading, possession, hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data. This platform indexes only publicly visible information posted by ransomware operators and open web sources without accessing or obtaining the underlying stolen content. The service is provided to support public awareness, legitimate research, and cyber-resilience. No stolen personal or confidential data is collected or distributed via this site.