Adelman & Gettleman listed on Akira ransomware leak site

• Ransomware group: Akira
• Country: United States
• Sector: Professional Services
• Announcement date: December 17, 2025

Akira ransomware group claims breach of Adelman & Gettleman

The Akira ransomware group has listed the Chicago-based law firm Adelman & Gettleman on its dedicated leak site. According to the announcement made on December 17, 2025, the threat actors claim to have successfully compromised the organization's systems and exfiltrated a significant amount of data.

The group alleges that they have obtained 31 GB of data belonging to the firm. While the threat actor has announced the breach, they have not provided a specific ransom demand or any screenshots to verify the contents of the stolen information. The Akira group is a known Ransomware-as-a-Service (RaaS) operation that has been active since early 2023. They are recognized for employing double extortion tactics, a method where attackers not only encrypt an organization's data but also threaten to leak sensitive information on public forums to pressure the victim into paying the ransom.

Alleged sensitive data types involved in the leak

The information provided in the leak site post suggests that the compromised data includes highly sensitive personal and legal documentation. The threat actor claims that the stolen files will be published soon. Although no visual evidence or screenshots were provided to confirm the contents, the listing identifies several categories of sensitive information that may have been exfiltrated:

• Passport data
• Driver's license information
• Social Security Numbers (SSNs)
• Financial records
• Court files
• Police reports

The presence of such diverse and sensitive documentation highlights the high-stakes nature of modern ransomware attacks targeting professional service providers.

About Adelman & Gettleman

Adelman & Gettleman is a boutique law firm based in Chicago. The firm specializes in commercial insolvency, bankruptcy, and related litigation. With over 40 years of experience in the field, the organization provides specialized legal services within the professional services sector.

Potential impact and organizational risks

The nature of the allegedly leaked data carries significant risks for both the firm's employees and its clients. The inclusion of identity documents such as passports, driver's licenses, and Social Security Numbers increases the risk of identity theft and fraudulent activities. For a law firm, the potential disclosure of court files and confidential documents is particularly damaging, as it could violate client privilege and lead to serious professional liability issues.

Because the institution is based in the United States, this incident may trigger specific legal obligations. Data breach notification requirements under various state laws and federal regulations may arise depending on the nature of the compromised information. Furthermore, given the known tactics of the Akira group, the stolen data could be utilized for secondary attacks, such as targeted phishing campaigns or further extortion attempts, which could negatively impact the institution's reputation and operational security.

In general, organizations facing such threats often prioritize incident response and forensic investigations to determine the full scope of the breach. Defensive measures typically include strengthening network segmentation, implementing multi-factor authentication, and maintaining robust, offline backups to mitigate the impact of encryption and extortion.