Some people whose personal data stolen in HWL Ebsworth hack not told for six months

Law firm says ‘complex manual review’ needed to assess what information was involved and to identify those affected

• Get our morning and afternoon news emails, free app or daily news podcast

Some people who have had dealings with Australia’s privacy regulator were only informed this week that their personal information, including banking data, was caught up in the hack of the law firm HWL Ebsworth.

The Russian-linked ransomware group ALPHV/BlackCat hacked the law firm in April. In September the group published on the dark web 1.1TB of the data it claimed to have stolen – later established to be 3.6TB.