About Ross, Brittain& Schonberg Co., Lpa targeted by Akira ransomware group

• Ransomware group: Akira
• Country: United States
• Sector: Professional Services
• Announcement date: September 19, 2025

Akira ransomware group claims data theft from law firm

The Akira ransomware group has announced the alleged theft of 66 GB of data belonging to About Ross, Brittain & Schonberg Co., Lpa on their leak site. This announcement, posted on September 19, 2025, follows a claimed attack date of August 29, 2025. The threat actor alleges that they have successfully compromised the network of the organization and intends to publish the stolen information.

Details of the alleged breach

According to the claims made by the Akira group, the breach involves a significant amount of corporate data. The threat actor asserts that 66 GB of information has been exfiltrated from the organization's systems. The group has stated that this data is slated for publication on their leak site. While the group has made these claims, no screenshots of the stolen data were provided in the announcement.

The information allegedly stolen during this incident is described as being highly sensitive and includes a variety of legal, financial, and personal records. The specific types of data mentioned in the claim include:

• Employee personal data
• Client personal data
• Financial documents
• Legal documents
• Social Security Numbers (SSN)
• Driver's license information

The group further alleges that the exfiltrated data contains police reports, hearing protocols, and non-disclosure agreements (NDAs). Additionally, the claim specifies that the stolen files include personal identifiers for both employees and clients, such as full names, dates of birth, addresses, email addresses, phone numbers, and other sensitive documentation.

About About Ross, Brittain & Schonberg Co., Lpa

About Ross, Brittain & Schonberg Co., Lpa is a law firm based in Cleveland, Ohio. The firm specializes in several areas of law, including labor law, employment law, workers' compensation, and matters related to OSHA. The organization primarily focuses on representing management in legal proceedings and matters.

Potential impact and security implications

This alleged breach may pose significant risks to client confidentiality and employee privacy. The exposure of sensitive identifiers such as SSNs and driver's licenses could lead to identity theft and targeted phishing attacks against the affected individuals. Given the firm's location in the United States, this incident may trigger regulatory scrutiny under state and federal data protection laws.

Considering the Akira group's known use of double-extortion tactics, the organization may face both operational disruptions and potential reputational damage. In double-extortion schemes, attackers not only encrypt an organization's data to disrupt operations but also steal sensitive information to threaten its public release, increasing the pressure to pay the ransom.

The group's known preference for exploiting VPN vulnerabilities suggests that the firm's network security posture may require a comprehensive review. For organizations in the professional services sector, maintaining robust security measures is critical. Common defensive steps for organizations facing such threats include implementing multi-factor authentication, maintaining regular offline backups, and conducting frequent vulnerability assessments to identify and patch weaknesses in remote access solutions like VPNs.