A ransomware group known as Silent Ransom Group has been deploying a novel tactic, sending fake IT workers to law firms' offices to gain physical access to sensitive data. These impostors, posing as legitimate IT support staff, utilize USB drives or remote access tools to exfiltrate valuable information. The FBI and Google have issued warnings about this group's activities, highlighting the escalating threat of in-person ransomware attacks. The Silent Ransom Group's methods underscore the importance of robust operational resilience planning, particularly in sectors with high-value data. The use of social engineering tactics, such as impersonating IT staff, allows these cybercriminals to bypass traditional security measures, making them a significant concern for organizations. This approach has been effective in targeting law firms, and other industries may be vulnerable as well1. The success of these in-person attacks emphasizes the need for organizations to reevaluate their security protocols and invest in robust operational resilience planning to mitigate such threats.