Contact us Buy Me a Coffee

Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Logo

Rob Levine & Associates

roblevine.com

Group: Akira

Discovered by ransomware.live: 2024-12-16

Estimated attack date: 2024-12-16

Country: US

Description:

Over 20 years ago, the personal injury law office of Rob Levine & Associates opened for business in Rhode Island. Since then, lead attorney Rob Levine has become known to have one of the most agg ressive approaches to personal injury litigation in the tri-state area. His dedication to helping Veterans and those in need of S ocial Security benefits has grown the practice into a nationwide law firm. We are ready to upload more than 300 GB of internar corporate dat a incuding: medical records of military veterans., inside financi al information, driver licenses, personal contact info etc.
Infostealer activity detected by HudsonRock

Compromised Employees: 2

Compromised Users: 4

Third Party Employee Credentials: 6

External Attack Surface: 3


DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • abuse@namecheap.com
  • cbe984b64048479880f4d1ad42cc9e93.protect@withheldforprivacy.com
MX Records
  • roblevine-com.mail.protection.outlook.com.
TXT Records
  • v=spf1 include:spf.protection.outlook.com include:_spf.mailgun.org include:spf.hubspotemail.net ip4:205.237.99.160/27 ip4:69.84.129.224/27 -all
  • MS=ms88327539
  • 1h33b4aelelro457novukjk732
  • google-site-verification=5ULKh9siqkEdqccqlVJzYggKmFZZ_ymu_hQhO-R18vk
  • google-site-verification=JtxJUQ20A3AM-Opx6Gsk8nnOjIhifIm7vUcoE4qznuc
  • google-site-verification=OlFhdLHWJl3AtoyQeSwQFU3Kh95Oso-B9qRPuUYvZV4
  • google-site-verification=UNS5PT6KASObqI_Ovg60E1VmZeHD5EbYY8DRa6piVdU
Cloud / SaaS Services Detected
HubSpot Microsoft 365 Mailgun

Legal Disclaimer: Ransomware.live does not engage in the acquisition, exfiltration, downloading, possession, hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data. This platform indexes only publicly visible information posted by ransomware operators and open web sources without accessing or obtaining the underlying stolen content. The service is provided to support public awareness, legitimate research, and cyber-resilience. No stolen personal or confidential data is collected or distributed via this site.