The Trump Campaign’s Law Firm Admits It Was Hacked

Over 100 gigabytes of Jones Day data was allegedly stolen.

Stefani Reynolds-Pool/CNP/ZUMA

Fight disinformation: Sign up for the free Mother Jones Daily newsletter and follow the news that matters.

Jones Day, the powerhouse law firm known for high-profile clients and cases—including aiding former President Donald Trump’s efforts to overturn his 2020 election loss—confirmed Tuesday some of the firm’s “information” had been “taken” through a hack targeting one of its vendors.

In statements to reporters at the American Lawyer and the Wall Street Journal, Jones Day maintained that its network had not been breached, blaming a third-party file sharing product instead. The company that makes it, Accellion, confirmed in January that one of its products had been compromised, disclosing that “less than 50 customers” had been effected. An early February update from the company said it had become aware of an initial attack in mid-December that continued into January 2021.

The emails were posted to Cl0p Leaks, a dark web site where other stolen data has been shared, on February 9. It’s unclear who exactly is behind the breach. A message sent to the site’s support email addresses was not immediately returned. But the Wall Street Journal reported that people claiming to be behind the theft have said they had “over 100 gigabytes of data.” Vice reported Tuesday that the same attackers claimed they tried to engage Jones Day in talks about the stolen material but didn’t hear back. “We hacked their server where they stored data,” they told Vice. “On attempts to ‘settle’ they responded with silence and we had to upload the data.” 

“Cl0p” refers to a variant of ransomware, software designed to lock a victim’s computer files until a ransom is paid. Brett Callow, a threat analyst with cybersecurity firm Emisoft, says there’s some debate as to who is behind the Cl0p Leaks site, but others have linked it to a prolific ransomware group with a history of financially extorting major targets. On its dark web site, that group claims it has “never attacked hospitals, orphanages, nursing homes, charitable foundations, and we will not,” but noted that it will attack commercial pharmaceutical organizations since “they are the only ones who benefit from the current pandemic.” The people behind the site also claim that they’ll help businesses fix holes and vulnerabilities that allow people such as themselves to steal and post their data for a fee: $250,000 in bitcoin.

“As Clop posted Jones Day’s data, it would seem that they were responsible for hacking the [the third party’s service], or they purchased or otherwise obtained the data from whichever threat actor was really responsible,” Callow said. “Neither option is good: Clop may have the data obtained via hacks of other [file transfer services]—which could be posted online—or an unknown third-party may be selling that data.”

Even before Jones Day worked with Trump on his election cases last fall, the firm was among the most prominent in the country, with over $2 billion in revenue and more than 2,000 lawyers, some of whom maintain ties to the highest echelons of Republican politics. Don McGahn, Trump’s onetime White House counsel, was a Jones Day partner prior to taking that post and returned after he left. The firm has been involved in roughly 20 election-related lawsuits on behalf of Trump or the Republican Party, the Times reported. After the election a group of anonymous senior lawyers at the firm told the New York Times that they were worried Jones Day’s work for Trump helps “undermine the integrity of American elections.”

The American Lawyer reported that Jones Day is the second law firm to confirm having been part of the Accellion breach after, Goodwin Procter, admitted involvement in January.

Fact:

Mother Jones was founded as a nonprofit in 1976 because we knew corporations and billionaires wouldn't fund the type of hard-hitting journalism we set out to do.

Today, reader support makes up about two-thirds of our budget, allows us to dig deep on stories that matter, and lets us keep our reporting free for everyone. If you value what you get from Mother Jones, please join us with a tax-deductible donation today so we can keep on doing the type of journalism 2022 demands.

payment methods

Fact:

Today, reader support makes up about two-thirds of our budget, allows us to dig deep on stories that matter, and lets us keep our reporting free for everyone. If you value what you get from Mother Jones, please join us with a tax-deductible donation today so we can keep on doing the type of journalism 2022 demands.

payment methods

We Recommend

Latest

Sign up for our free newsletter

Subscribe to the Mother Jones Daily to have our top stories delivered directly to your inbox.

Get our award-winning magazine

Save big on a full year of investigations, ideas, and insights.

Subscribe

Support our journalism

Help Mother Jones' reporters dig deep with a tax-deductible donation.

Donate