8. Grubman Shire Meiselas & Sacks

Recovery And Mitigation Costs: $365,000 (Disputed)

Entertainment and media law firm Grubman Shire Meiselas & Sacks confirmed in mid-May that its computer systems were hacked which allegedly resulted in the theft of 756 gigabytes of private documents and correspondence, according to Variety. The attack was carried out by REvil, also known as Sodinokibi, according to cybersecurity firm Emsisoft.

The hacker collective claimed to be holding thousands of the law firm’s documents hostage, including private info on Lady Gaga, Madonna, Nicki Minaj, Bruce Springsteen, Mary J. Blige, Ella Mai, Christina Aguilera and Mariah Carey, Variety reported. The hackers said President Donald Trump would be the next subject of a public data dump if they weren’t paid within a week, according to Variety.

REvil initially demanded a $21 million ransom and claims to have received payment of $365,000 in connection with the documents stolen from the law firm, prompting the hackers to double their ransom demand to $42 million. However, a rep for Grubman Shire Meiselas & Sacks told Variety in mid-May that it was categorically false that any payments had been made to the cybercriminals.