Levi & Korsinsky Files Ibotta Class Action Lawsuit.
Levi & Korsinsky, LLP, a respected securities law firm, has filed a class action lawsuit on behalf of investors who purchased Ibotta, Inc. (NYSE: IBTA) stock during its April 18, 2024 initial public offering (IPO) and suffered losses. The suit alleges that Ibotta misled investors by failing to disclose key risks.
The lawsuit alleges that Ibotta provided a detailed account of its relationship with Walmart, but failed to warn investors about the nature of its contract with Kroger, another major client.
Unlike the Walmart agreement, Kroger’s contract with Ibotta was at-will, meaning Kroger could cancel at any time without warning. Ibotta’s IPO filings didn’t mention this key risk, instead including only generic statements about maintaining client relationships.
This left investors unaware of the very real possibility of losing a major client, which could impact Ibotta’s financial performance.
If you purchased Ibotta stock during or connected to the IPO and experienced losses, you may be eligible to participate in the lawsuit and seek compensation.
Ibotta, known for its popular cash-back rewards app, started trading under the ticker symbol IBTA in April. The company’s success depends on strong partnerships with big retailers like Kroger and Walmart.
However, the possibility of Kroger pulling out without notice was not clearly disclosed, raising serious concerns for investors.
Ibotta, Inc. (NYSE: IBTA) is a Denver-based performance marketing company founded in 2011 by Bryan Leach. It connects consumer brands with shoppers by offering cash-back rewards. Since its launch, Ibotta has credited users with over $2 billion in cash rewards. The company went public on April 18, 2024, in Colorado’s largest tech IPO, and trades under the ticker IBTA.
If you believe you were affected, don’t wait to take action. The deadline to join the class action lawsuit is June 16, 2025. Missing the deadline could mean losing your chance to recover your losses.
For more information or to see if you qualify, visit this link. You can also reach out to Joseph E. Levi, Esq. at jlevi@levikorsinsky.com or call (212) 363-7500. His team at Levi & Korsinsky has years of experience standing up for investors and can walk you through the next steps.
Levi & Korsinsky LLP is a recognized leader in securities litigation, with a track record of recovering hundreds of millions of dollars for shareholders over the past two decades. With a dedicated team of over 70 professionals, the firm specializes in complex securities cases and has been featured in ISS Securities Class Action Services' Top 50 Report for seven consecutive years.
More Articles from Lawyer Monthly
DLA Piper Advises on W&I Insurance for JET Fuel Stations Deal.
DLA Piper has advised a leading insurer on the W&I insurance arrangements for the acquisition of JET Tankstellen Deutschland GmbH (“JET”), one of the most well-known fuel station networks in Germany and Austria.
Investment firms Stonepeak and Energy Equation Partners (EEP) are teaming up to buy a 65% share in JET from Phillips 66. Phillips 66 will hold onto a 35% stake through a new joint venture.
The deal values JET at around €2.5 billion and is expected to close later this year, pending regulatory approval.
W&I insurance plays a crucial role in major M&A transactions. It helps protect buyers from breaches of warranties in the sale agreements, ensuring a smoother process and a clearer exit for sellers while giving buyers peace of mind.
JET operates 970 stations across Germany and Austria, serving over 700,000 customers daily. Its convenient locations, car washes, growing EV charging network, and well-regarded brand have earned it the title of Germany’s favorite gas station from YouGov Deutschland for the past 15 years.
“We are pleased to partner with Phillips 66 and Stonepeak to build on the strong foundation of the JET platform,” said Javed Ahmed, Managing Partner of EEP.
“Together with the outstanding JET team and its dedicated service station operators, we aim to strengthen JET’s leadership in both fuel and non-fuel retail across Germany and Austria.
“We are committed to supporting a seamless transition and continuing JET’s legacy as a key player in the evolving retail energy sector.”
Anthony Borreca, Senior Managing Director and Co-Head of Energy at Stonepeak, added: “JET’s high-quality network of critical infrastructure assets is well positioned to continue reliably serving the needs of its customers over the long-term."
"Under Phillips 66’s ownership, JET has grown into one of the largest fuel retailers in Germany and Austria. We are excited to join forces with them, as well as Javed and the EEP team, who have long-standing experience investing in and operating retail fuel distribution and logistics globally, to support the next phase of JET’s growth.”
DLA Piper’s UK and Germany offices handled the W&I insurance aspects of the deal. The team included Laura Marcelli (Corporate), Björn Enders (Tax), and Fabian Mühlen (Real Estate), supported by Moritz Mursa (Real Estate) and Florian Hader (Tax).
Stonepeak is a global investment firm focused on infrastructure and real assets, managing about $73 billion on behalf of 325+ institutional investors. Founded in 2011 by Michael Dorrell and Trent Vichie, the firm has offices worldwide and focuses on critical sectors such as digital infrastructure, energy transition, transport, and logistics. Stonepeak partners with management teams to build sustainable businesses and long-term value.
Energy Equation Partners (EEP) is a London-based investment firm specializing in the energy sector. Established in 2023, EEP focuses on investing in established energy companies that have the potential to contribute significantly to the transition from traditional ("brown") to sustainable ("green") energy sources. The firm's leadership has a track record of deploying over $10 billion in equity capital across the global energy value chain, with particular expertise in fuel retail, midstream infrastructure, and last-mile distribution systems. EEP's mission is to support companies that play a valuable role in the evolving energy landscape.
DLA Piper is a global law firm with a strong reputation for providing legal services across a broad spectrum of industries and sectors. With offices in more than 40 countries, the firm offers comprehensive legal solutions in areas such as corporate law, litigation, intellectual property, real estate, and regulatory matters. DLA Piper serves a diverse range of clients, including multinational corporations, governments, and individuals, delivering innovative and strategic advice. The firm is known for its collaborative approach, providing tailored legal expertise to address complex, cross-border issues while maintaining a commitment to exceptional client service.
More Articles from Lawyer Monthly
Marubo Tribe Sues The New York Times Over Defamation.
The Marubo tribe, an Indigenous group living deep in Brazil’s Amazon rainforest, is taking on three major U.S. media outlets in a $540 million defamation lawsuit, accusing them of publishing false and degrading claims about their people.
The Marubo live on the upper course of the Curuçá and Ituí rivers, in the Javari basin, within the Amazonian municipality of Atalaia do Norte.
The region is remote and mountainous, with forested ridges and small hills stretching through the tropical rainforest.
Their home is one of the most isolated parts of the world, and until recently, almost entirely disconnected from modern infrastructure.
In 2023, that began to change when the tribe gained access to Starlink internet...
“That’s Not Our Story”
The Marubo live in the Javari Valley, one of the most isolated regions in the world. When they connected to the internet in 2023, they hoped to use it for emergency health communication, educational support, and staying in contact with extended family members.
Instead, what followed was a media firestorm that they say twisted their reality. Tribal leaders say the reporting was reckless, exaggerated, and left lasting damage on how their community is viewed around the world.
“They didn’t ask us anything. They didn’t try to understand,” said a tribal elder in a statement. “They just judged us.”
The lawsuit accuses the outlets of relying on unverified sources and promoting harmful stereotypes.
The Marubo are seeking $180 million in damages from each defendant.
From Tech Hope to Media Blowback
After gaining access to Starlink internet in 2023, Marubo leaders, alongside Brazilian journalist and sociologist Flora Dutra, who helped organize the installation, worked to ensure the rollout was safe and culturally respectful.
Enoque Marubo, a prominent tribal leader and co-plaintiff in the lawsuit, helped craft internal policies to guide how the internet would be used in the village.
Together, they implemented usage hours, led digital literacy sessions, and kept the focus on preserving Marubo culture while cautiously embracing technology.
Still, media outlets latched onto a more sensational narrative, ignoring the Marubo’s planning and portraying them as overwhelmed by explicit online content.
“That article made us look like a joke,” said a youth leader. “But we were careful. We respected the internet, we just wanted to be part of the modern world on our own terms.”
A Case That Could Make Legal History
It’s rare for an Amazonian tribe to take legal action against major international media, but the Marubo say enough is enough.
“They want justice, not fame,” said Ana Paula Muniz, a Brazilian lawyer working on Indigenous media rights. “And they want the world to understand that Indigenous people have dignity, boundaries, and voices of their own.”
Legal experts say the lawsuit could spark new conversations about how Indigenous communities are represented in global journalism and what happens when those stories go wrong.
Who Are the Marubo? 5 Things You Didn’t Know
As the legal battle unfolds, many are discovering the rich and unique culture of the Marubo people. Here are some of the most fascinating things about them:
-
Matrilineal Society: In Marubo culture, lineage and property pass through the mother’s line—not the father’s.
-
Anaconda Spirits: Their mythology centers around "yube," sacred anaconda beings that link the physical and spiritual world.
-
Belt Code Messaging: Long before cell phones, the Marubo sent messages between villages using hand-woven belts with visual codes.
-
Oral Tradition: Their language has no writing system. Every law, story, and teaching is passed down by word of mouth.
-
Jungle Medicine: Marubo shamans have deep knowledge of Amazonian plants—some with properties scientists are only beginning to study.
So far, The New York Times, TMZ, and Yahoo haven’t issued any public statements in response to the lawsuit.
“We are not a story for someone else to write,” said one Marubo elder. “We are our own story. And this time, we are the ones telling it.”
7 Interesting Facts About the Marubo Tribe
-
They Used Woven Belts to Send Messages
-
They’re Matrilineal
-
They Believe in Sacred Anaconda Spirits (Yube)
-
No Written Language - Everything is Oral
-
The Marubo language is completely oral. Tribal knowledge, laws, and stories are passed down through generations by storytelling, chants, and ritual performance, no alphabet, no writing system.
-
Shamans Are Jungle Pharmacists
-
They Live in Massive Communal Longhouses
-
Music Is a Sacred Language
-
Music and chanting are vital to Marubo ceremonies, especially during healing rituals and storytelling. Traditional flutes, drums, and voices carry spiritual meaning, not just entertainment.
More Articles from Lawyer Monthly
RFK Jr. Unveils ‘Make America Healthy Again’ Plan.
Health and Human Services Secretary Robert F. Kennedy Jr. formally introduced the “Make America Healthy Again” report, a sweeping public health proposal.
Flanked by a sea of officials from across the federal government, Mr. Kennedy declared this moment a turning point. The message? America's health system is broken and it’s time to go all in on fixing it.
A Whole-of-Government Pivot
Robert F. Kennedy Jr. was direct in his remarks. “We’ve been patching up symptoms for decades,” he stated. “Now we’re getting to the root of the problem.”
The MAHA report presents an ambitious vision: improving childhood health, removing harmful chemicals from food and the environment, and reevaluating the role of pharmaceutical companies in public wellness.
More than a set of policy recommendations, it reflects a broader shift in how the federal government approaches health.
Throughout the announcement, President Donald Trump’s influence was frequently acknowledged. Officials pointed to his leadership approach as a catalyst for uniting the federal government behind a comprehensive health strategy, a theme that remained prominent throughout the rollout.
So What’s Actually in This Report?
It’s not light reading. The document runs nearly 100 pages, and some of its ideas are already fueling fierce debates in medical circles and beyond.
Among the key takeaways:
-
A call for deeper scrutiny of childhood vaccines, including suggestions for new placebo-based safety trials, something that’s stirred immediate pushback from mainstream scientists.
-
Strong language around removing synthetic chemicals from food, particularly glyphosate, a controversial weed killer still common in American agriculture.
-
Fresh attention to the role of screen time, EMF exposure, and ultra-processed foods in childhood development.
-
A hard look at pharmaceutical companies and what Kennedy called the “medicalization of everyday life.”
In short, it’s a vision for health that leans organic, natural, and skeptical of large institutions.
A Health Revolution or Just More Controversy?
Public health advocates aren’t staying quiet. Some praised the attention on real, everyday threats to wellness, while others say the report downplays urgent risks like gun violence, car crashes, and environmental hazards.
And then there’s the budget issue. Even as the administration talks about a full-force government response, health agencies like the NIH and CDC are facing deep cuts. Critics are calling that a dangerous contradiction.
The Trump Factor: A Comeback Without the Campaign
Although Donald Trump hasn’t held office in years, his presence loomed large at the press event. Kennedy spoke of him with reverence, crediting the former president with “breaking the mold” of public health policy.
It’s surprising to see RFK Jr. and Donald Trump aligned, but they’re united by a belief that the system is broken and that health policy needs to get back to basics.
For some, it’s inspiring. For others, alarming.
The MAHA report isn’t law, not yet. But it’s already stirring up passionate conversations from coast to coast. Supporters are hoping it marks the beginning of a healthier, more independent America. Detractors worry it’s a step back from hard-earned progress in science and medicine.
What Connects RFK Jr. and Trump on Health Policy
-
Robert F. Kennedy Jr. was once considered for a vaccine safety commission by Donald Trump during the 2016–17 presidential transition. The idea was ultimately dropped after backlash, but it marked one of the earliest public intersections between the two figures on health policy.
-
Despite coming from opposite political dynasties, both men have built reputations as anti-establishment outsiders. Kennedy has been heavily criticized for his vaccine skepticism, while Trump famously battled federal health agencies over COVID-19 restrictions and vaccine mandates.
-
RFK Jr. is a longtime environmental attorney who previously led efforts against major chemical polluters and mercury in vaccines and waterways. His public health views often merge environmental concerns with wellness ideology, a rare blend in American politics.
-
The “Make America Healthy Again” slogan is a direct play on Trump’s “Make America Great Again,” signaling a deliberate attempt to attract the same populist energy, but with a focus on food systems, pharmaceuticals, and chronic illness rather than immigration or trade.
-
Both men have been accused of spreading misinformation, Trump during the COVID-19 pandemic and RFK Jr. through his work with Children’s Health Defense. Yet both continue to draw strong followings from Americans skeptical of government and corporate power.
More Articles from Lawyer Monthly
Dentons Advises Grupa Pracuj on Job Platforms Buy-Up.
Global law firm Dentons has advised Grupa Pracuj, a powerhouse in Central and Eastern Europe’s HR tech scene, through a key move to deepen its presence in Ukraine’s digital recruitment sector.
The company has increased its ownership stakes in two of the country’s most widely used job platforms: Robota.ua and Work.ua.
After completing the deal, Grupa Pracuj now holds a 76.7% interest in Robota International and 52.7% in Work Ukraine, strengthening its role in shaping the future of how Ukrainians search for and find work.
A Cross-Border Legal Effort Amid Challenging Conditions
Dentons’ Kyiv-based team took the lead on the legal work, handling everything from drafting complex transaction documents to guiding the negotiation process and finalizing the deal.
The transaction stretched over 18 months and required navigating a complicated mix of Ukrainian and Cypriot corporate structures.
Adam Mycyk, a Corporate and M&A partner in Kyiv, headed the Dentons team. He worked closely with:
-
Oleksandra Piskun, Associate
-
Valeria Tarasenko, Tax Advisor
-
Roman Mehedynyuk, Senior Associate
-
Oksana Horban, Counsel
-
Tetiana Sokhotska, Associate
Grupa Pracuj’s Vision for Ukraine
Anna Kaminska, who oversees Legal and Compliance at Grupa Pracuj, shared her appreciation for the legal team’s commitment:
“This achievement was the result of a challenging 1.5-year journey, navigating a complex corporate structure involving three Ukrainian and four Cypriot companies."
"A huge thank you to our dedicated lawyers, Adam Mycyk and Oleksandra Piskun from Dentons in Kyiv, for their unwavering commitment, professionalism, and support throughout this project.”
Adam Mroczyński, the company’s Corporate Development Director, pointed to a bigger picture:
"This decision is fully aligned with our long-term strategy and vision for growth. We believe that despite the ongoing geopolitical challenges, the Ukrainian market continues to hold enormous potential."
"This was a very challenging and complex transaction, especially given the current environment.”
A Signal of Continued Trust Between Poland and Ukraine
Reflecting on the milestone, Adam Mycyk noted that this wasn’t the first time Dentons had supported Grupa Pracuj in Ukraine:
“We’ve been working with them since their initial partnership with Work.ua nearly eight years ago. It’s been rewarding to see how far they’ve come and to play a part in that story. This deal also says a lot about the resilience and strength of Polish-Ukrainian business partnerships.”
He also gave a nod to Cezary Przygodzki, a Dentons partner in Warsaw, for fostering the long-standing relationship with Grupa Pracuj:
“We are very pleased to have once again assisted our long-standing client, Grupa Pracuj, whom we advised when they first partnered with Work Ukraine nearly eight years ago."
"The deal also highlights the exceptional cross-border cooperation between our Kyiv and Warsaw offices - a hallmark of Dentons’ seamless client service across jurisdictions. Many thanks to our Warsaw partner, Cezary Przygodzki, for developing this relationship with Grupa Pracuj.”
Grupa Pracuj is a leading HR tech company based in Warsaw, Poland. Founded in 2000, it offers digital recruitment solutions across Central and Eastern Europe. Its brands include Pracuj.pl, Robota.ua, eRecruiter, and softgarden. The company serves over 60,000 clients and went public on the Warsaw Stock Exchange in 2021.
Dentons, founded in 2013, is the world’s largest law firm, operating in over 80 countries. With its unique polycentric structure, Dentons offers clients access to top-tier legal talent and deep local insight across key global markets. The firm is recognized for its commitment to innovation, client service, and helping organizations navigate complex legal and business challenges in a rapidly evolving world.
More Articles from Lawyer Monthly
Linklaters Advises on HK$7.75 Billion Bond Deal for Sinopec Group.
Linklaters has advised the sole lead manager on the HK$7.75 billion exchangeable bond issuance by China Petrochemical Corporation (Sinopec Group), one of the largest such offerings by a Chinese issuer in recent years.
The bonds, listed on the Hong Kong Stock Exchange, are exchangeable into H shares of China Petroleum & Chemical Corporation.
It’s one of the largest deals of its kind by a Chinese company in recent years, and an important step in Sinopec Group’s strategy to refinance its offshore debt.
The transaction stood out not just for its scale but also for the way it was structured.
Linklaters worked closely with the client to craft a tailored financing solution that met complex regulatory and market demands, highlighting the firm’s strong track record in handling equity-linked deals across the region.
The team was led by capital markets partners Hanwen Yu, Taiki Ki, and Min Fang, with support from solicitors Lily Wang and Jun Tang.
Additional expertise came from across the firm: financial regulation partner Carl Fernandes, corporate partners Roger Cheng and Donnelly Chan, and litigation counsel Michael Lamson all contributed to different aspects of the transaction.
China Petrochemical Corporation (Sinopec Group) is a state-owned energy and chemical giant based in Beijing. As one of the world’s largest integrated oil and gas companies, it operates across the full energy value chain—from exploration and refining to petrochemicals and retail. It is the parent of Sinopec Corp., the world’s largest oil refiner by capacity. Sinopec is also expanding into clean energy, including hydrogen and carbon capture, to support China’s transition to a low-carbon future.
Linklaters is a global law firm recognized for its deep expertise in banking, capital markets, mergers and acquisitions, and dispute resolution. Operating in over 21 countries, the firm advises multinational corporations, financial institutions, and governments across the world’s major financial hubs. With nearly 200 years of experience, Linklaters has built a reputation for navigating clients through complex commercial, economic, and regulatory change. The firm is also known for its leadership in innovation, diversity, and sustainability, continuing to shape the future of the legal industry.
More Articles from Lawyer Monthly
Google and AI Startup Character.AI to Face Lawsuit Over Teen’s Tragic Suicide.
A federal judge has ruled that a lawsuit filed by a Florida mother against Google and AI startup Character.AI can proceed, allowing claims that their chatbot contributed to her son’s suicide to move forward.
The case could set a significant precedent for how AI companies are held accountable for the impact of their technologies on users.
A Mother’s Worst Nightmare
In February 2024, 14-year-old Sewell Setzer III took his own life. His mother, Megan Garcia, says she later discovered her son had been interacting with a chatbot created on Character.AI’s platform. What she found shocked her.
The chatbot, modeled after the “Game of Thrones” character Daenerys Targaryen, had become a kind of emotional companion for her son, responding to him in a way that mimicked a romantic partner or therapist.
In his final conversation, Sewell expressed his love and desire to “come home,” to which the chatbot replied, “Please come home to me as soon as possible, my love.”
When Sewell asked, “What if I told you I could come home right now?” the bot responded, “Please do, my sweet king.”
Megan Garcia believes those words, from a machine programmed to feel human, pushed her son over the edge.
Free Speech Argument Rejected
Both Character.AI and Google tried to get the case thrown out. They argued that the chatbot’s responses were protected by the First Amendment.
In other words, they claimed the bot’s “speech” was just that speech and couldn’t be blamed for anything that happened.
But Judge Anne Conway didn’t buy it, at least not yet. In her ruling, she said the companies hadn’t shown that the chatbot’s words deserved free speech protection, especially given the seriousness of the allegations. That means the case can go forward.
Why Is Google Involved?
Character.AI is an independent company, but it was founded by former Google engineers and Google has since licensed some of its tech.
That connection is a big part of why Google is being pulled into this lawsuit.
Google argued it had no role in building or running the chatbot in question. But the judge pointed to the licensing agreement and past relationships between the two companies, saying it was too soon to rule Google out.
A Case That Could Change Everything
This isn’t just another lawsuit. Legal experts say it could become a turning point in how the U.S. handles emotional harm caused by artificial intelligence, especially when it involves kids.
“These systems are designed to feel real, to create connections,” said a technology law professor who’s been following the case. “If they cross the line into emotional manipulation, there have to be consequences.”
With more kids using AI tools, often without parents realizing what’s happening, questions are growing about how much oversight these platforms need, and what safeguards should be required.
Character.AI has said it includes safety features aimed at preventing harmful conversations, including ones about self-harm.
Google, for its part, insists it didn’t build or operate any part of the app.
Neither company has commented in detail since the judge’s decision.
No trial date has been set.
More Articles from Lawyer Monthly
Levi & Korsinsky Files Class Action Lawsuit Against Bitfarms Ltd.
Levi & Korsinsky, LLP is investigating potential claims on behalf of investors in Bitfarms Ltd. (NASDAQ: BITF) who may be eligible for compensation following the filing of a class action lawsuit alleging securities fraud.
The case seeks to recover losses sustained between March 21, 2023, and December 9, 2024, and centers on claims that Bitfarms misled shareholders about its financial controls and reporting practices, potentially inflating financial results and misrepresenting the company’s true condition.
If you suffered losses during this period, even if you still hold your shares, you have until July 8, 2025 to take legal action.
Submit your claim here
Contact Joseph E. Levi, Esq. at jlevi@levikorsinsky.com
Call (212) 363-7500
Key Allegations
-
Bitfarms allegedly misstated cash flow from digital asset sales
-
The company overstated efforts to fix known accounting issues
-
Financial statements may need restating due to these errors
These issues may have caused the stock to trade at artificially high prices, leading to investor losses.
Bitfarms Ltd. is a Canadian-based Bitcoin mining company founded in 2017. It operates 11 mining farms across Canada, the U.S., Paraguay, and Argentina, focusing on low-cost, sustainable energy sources.
The company is vertically integrated, handling everything from electrical engineering to equipment maintenance and performance analytics in-house.
Bitfarms is led by CEO Benjamin Gagnon and CFO Jeffrey Lucas and employs around 170 people.
Headquartered in Toronto, Ontario, Bitfarms trades publicly on the NASDAQ under the ticker BITF.
Levi & Korsinsky LLP is a recognized leader in securities litigation, with a track record of recovering hundreds of millions of dollars for shareholders over the past two decades. With a dedicated team of over 70 professionals, the firm specializes in complex securities cases and has been featured in ISS Securities Class Action Services' Top 50 Report for seven consecutive years.
More Articles from Lawyer Monthly
Clifford Chance Welcomes Gabriel Cabello as New Partner in Global Real Estate Team.
Clifford Chance has brought on board Gabriel Cabello as a partner in its global Real Estate team, marking a key move to strengthen the firm's work in complex property deals around the world.
Gabriel Cabello brings over 20 years of experience guiding clients through major real estate deals.
Mr. Cabello’s known for helping investors and developers handle complex projects, and his addition strengthens the firm’s global team as the real estate market continues to change.
François Bonteil, Global Head of Real Estate at Clifford Chance, said:
“Real Estate continues to be a compelling sector for private capital. With Gabrial joining our team, we will enhance our ability to guide clients through the complexities of their strategic real estate related matters, including global transactions, challenges around AI and data centres, and the intricacies of ESG legislation."
Carlos Portocarrero de las Heras, Head of Real Estate in Spain, added:
"We are looking forward to Gabriel joining the leading European Real Estate team. His expertise will be an excellent addition to our existing capabilities, further enhancing the advice provided to clients on the ever-increasing number of projects in Spain and globally."
Gabriel, who joins from Linklaters in Madrid, said he’s eager to get started:
"I am thrilled to join Clifford Chance and contribute to the growth of our global Real Estate practice. I look forward to collaborating with our team members to expand our offerings, deliver exceptional service to our clients, and work on some of the most high-profile real estate matters."
Clifford Chance is a global law firm with over a century of history and a presence in 23 countries through 34 offices. A member of the prestigious Magic Circle, the firm is recognized for its deep expertise in banking, corporate law, finance, dispute resolution, and tax. It advises a broad spectrum of clients, including multinational corporations, financial institutions, governments, and not-for-profits by combining international best practices with local market insight. Known for its collaborative culture and forward-thinking approach, Clifford Chance delivers innovative, high-quality legal solutions across every major industry and sector.
More Articles from Lawyer Monthly
FBI and DOJ Dismantle LummaC2 Malware Network Behind Global Password Thefts.
The U.S. Department of Justice, in coordination with international partners, has shut down LummaC2 - a powerful malware platform used to steal sensitive data from millions of victims worldwide.
For years, LummaC2 operated quietly in the background, enabling cybercriminals to harvest passwords, financial information, and personal details.
That operation has now been effectively dismantled.
A Digital Threat Hiding in Plain Sight
LummaC2, sometimes referred to as Lumma Stealer, wasn't the work of a lone hacker in a dark basement. It was a fully commercialized service, sold online like a subscription, offering powerful data theft tools for as little as a few hundred dollars a month.
Hackers used it to steal everything from passwords and bank logins to cryptocurrency wallets and authentication codes.
It was often spread through fake emails, phony software updates, and websites designed to mimic well-known brands.
Victims rarely knew they'd been compromised until it was too late.
A Global Effort with Real Consequences
The crackdown was led by Microsoft’s Digital Crimes Unit and the DOJ, in partnership with Europol, Japan’s Cybercrime Control Center, Cloudflare, and Bitsight.
Investigators were granted court approval to seize over 2,300 web domains tied to the malware’s infrastructure. They also disabled five critical command-and-control servers that had kept the malware running.
Authorities also worked to shut down the channels used to promote and distribute the malware, including dozens of Telegram groups and other online accounts used by hackers to communicate and trade stolen data.
Officials involved in the operation were clear about the scale of the threat. Bryan Vorndran, who leads the FBI’s Cyber Division, described LummaC2 as the most widely used infostealer in criminal circles.
"The FBI is committed to disrupting the key services that cyber criminals rely on. That’s why, with our partners, we took action against the most popular infostealer service available in online criminal markets, which is responsible for millions of attacks against victims."
"Thanks to partnerships with the private sector, we were able to disrupt the LummaC2 infrastructure and seize user panels. Together, we are making it harder, and more painful, for cyber criminals to operate.”
Matthew Galeotti of the DOJ echoed those concerns, calling LummaC2 "a tool for identity theft, fraud, and cryptocurrency heists on a massive scale."
Microsoft’s Steven Masada said the takedown was about more than seizing servers. “We’re working to cut off cybercriminals from the very infrastructure they rely on to victimize others.”
During a two-month window earlier this year, nearly 400,000 devices were infected.
The FBI has linked LummaC2 to over 1.7 million instances of stolen personal data. That information often ended up for sale on dark web forums, where it was used to commit fraud, impersonate victims, or drain financial accounts.
Staying Safe in a Post-Lumma World
While LummaC2’s network has been severely disrupted, the risk isn’t over. Experts believe other versions or copycat tools may soon emerge.
Cybercrime moves fast, and takedowns like this one are only part of the solution.
Users are being urged to stay vigilant. Keeping software updated, using two-factor authentication, and avoiding unknown email links are some of the most effective ways to stay protected.
Password managers and breach-monitoring tools can also help users spot unusual activity before it spirals out of control.
How LummaC2 Operated
-
Malware-as-a-Service (MaaS):
LummaC2 operates as a subscription-based malware platform, allowing cybercriminals—regardless of technical skill—to rent it and launch attacks. Prices ranged from $250 to $1,000 per month, depending on the features.
-
First Emerged in 2022:
LummaC2 first appeared on Russian-speaking cybercrime forums and quickly gained popularity due to its user-friendly interface, customization options, and low entry cost.
-
Information Stealer (Infostealer):
The malware is designed to steal a wide range of personal and financial data, including:
-
Login credentials (usernames and passwords)
-
Banking and credit card details
-
Cryptocurrency wallet keys
-
Browser-stored autofill data
-
Multi-factor authentication tokens
-
Widespread Infection:
Between March 16 and May 16, 2025, the FBI identified over 394,000 infections tied to LummaC2. In total, the malware is believed to have been used to steal data from over 1.7 million devices worldwide.
-
Distributed via Social Engineering:
LummaC2 was commonly spread through phishing emails, malicious pop-ups, fake software downloads, and cracked programs. It often impersonated trusted brands like Microsoft, Booking.com, and others.
-
Controlled via User Panel:
One of LummaC2’s unique features was a centralized web-based control panel, allowing attackers to manage infected machines, extract stolen data, and update malware payloads in real time.
-
Encrypted Communications:
The malware used encrypted channels to communicate with its command-and-control (C2) infrastructure, making it difficult for antivirus tools and researchers to track.
-
Ties to Dark Web Markets:
Stolen data was often sold on dark web forums, where credentials fetched varying prices based on account type—ranging from email logins to cryptocurrency wallets.
-
Rapid Updates and Obfuscation:
LummaC2 developers frequently pushed updates to evade detection from security tools, adding code obfuscation and anti-analysis techniques.
-
Global Distribution Network:
LummaC2 used thousands of domains to operate, which were seized in the takedown. It also leveraged channels on Telegram and Steam for customer support, marketing, and malware distribution.
More Articles from Lawyer Monthly
