Russian-linked hackers taunt HWL Ebsworth over data breach, claim to have published documents to dark web

Last night, the Russian-linked AlphV ransomware gang taunted HWL Ebsworth by publishing 1.45 terabytes of sensitive data on the dark web. This is allegedly a result of HWL Ebsworth's refusal to pay the ransom demanded by the group. The Australian law firm reported the data breach in late April, but the extent of the breach is still unknown. The group, also known as BlackCat, has previously claimed to possess internal company data such as financial and insurance data, credit card information, agreements, and reports. This event has caused significant concern for the law firm and its clients, which have included the Australian Taxation Office, the Environment and Human Services Department, and the South Australian, Queensland, and ACT governments, among others.

The Tasmanian government is also investigating whether it has been affected by the data breach. Tasmania's Minister for Science and Technology, Madeleine Ogilvie, stated that investigations are underway to identify if any information has been compromised. The Tasmanian government was previously affected by a separate data breach a few months ago in which names, addresses, and bank statements of Tasmanian parents and students were released online. The hacker group behind this incident issued the threat to publish the data earlier this week.

The hack of HWL Ebsworth underpins the increasing number of ransomware attacks on Australian businesses. According to the Australian Cyber Security Centre, there has been a 75% increase in incidents since 2019-20, warranting concern and scrutiny.

AlphV's threat has prompted agencies such as the Australian Taxation Office to caution taxpayers to be aware of scams that may refer to HWL Ebsworth. The Department of Home Affairs is leading the federal government's response to the breach, and all relevant authorities and law enforcement are involved in the ongoing investigation.

HWL Ebsworth has reiterated its commitment to ensuring the privacy and security of its client and employee data. The firm has stated that it will not give in to the ransom demand and that it takes its ethical and moral duties to the community seriously.

Ukraine's Nova Kakhovka Dam Crisis: An Act of War and a Test of Humanity

The destruction of the Nova Kakhovka dam in the Kherson region of Ukraine has triggered a national crisis, with Ukrainian President Volodymyr Zelensky declaring it a disaster of "unprecedented proportions"​1​. This calamity came about amidst a backdrop of escalating tensions between Ukraine and Russia, with both nations pointing fingers at each other as the perpetrator of the dam's destruction​3​.

The practice of destroying dams in warfare dates back centuries. It was discovered as early as the 16th century during the Eighty Years’ War that flooding areas could impede the progress of enemy forces​3​. This method continued into the 20th century, infamously seen in the "Dambusters" raid during World War II when British forces attacked German dams, and later during the Korean War with the bombing of North Korean hydroelectric facilities by the United States​3​.

Yet, the destruction of such structures not only incapacitates enemy forces but also wreaks havoc on civilian populations and the environment. In response to this, the international community introduced Additional Protocol I to the Geneva Conventions in 1977. This protocol prohibited the use of methods or means of warfare expected to cause "widespread, long-term, and severe damage to the natural environment" and particularly outlined protection for structures like dams and dykes​3​.

The Nova Kakhovka dam's demolition, regardless of who is responsible, has led to severe flooding that devastated the surrounding regions, causing the evacuation of thousands of civilians​3​​4​. Furthermore, there is no evidence that the dam was being used to support military actions, which is the only condition under which its destruction could be justified under the Geneva Conventions​3​.

Complicating the issue further, Russia, which was initially a signatory to the Geneva Conventions, had its signature removed by President Vladimir Putin in 2019. While some argue that these rules may not apply to Russia due to this, others suggest these rules are so customary that they should be binding on all nations at all times. Despite the latter argument, no one has ever been brought to justice for attacking dams​3​.

The International Criminal Court (ICC) has the jurisdiction to investigate the destruction of the dam as a potential war crime, even though the US, Russia, and Ukraine are not parties to the statute that undergirds the ICC. This is because Kyiv has twice exercised its prerogatives to accept the court’s jurisdiction over alleged crimes occurring on its territory, and the ICC has accepted this jurisdiction​3​.

As the world watches the unfolding disaster in Ukraine, questions of accountability and restitution are brought to the forefront. If not addressed, these heinous acts may continue, eroding norms that are meant to restrain warfare and risking the desensitization of the world to such acts of barbarity​3​.