Bergman Dacey Goldsmith targeted by Akira ransomware group

• Ransomware group: Akira
• Country: United States
• Sector: Professional Services
• Announcement date: October 28, 2025

Akira ransomware group claims data breach at Bergman Dacey Goldsmith

The Akira ransomware group has announced that it has successfully compromised the systems of the law firm Bergman Dacey Goldsmith. According to an announcement made on a ransomware leak site on October 28, 2025, the threat actor group claims to have obtained a significant volume of corporate documents belonging to the organization.

The group alleges that the breach resulted in the theft of approximately 110 GB of data. While the group has posted an announcement regarding the incident, they have not provided any screenshots to substantiate their claims at this time. The threat actors have indicated that the stolen files may be published on their dedicated leak site in the near future, a common tactic used by ransomware groups to exert pressure on their victims.

Details of the claimed data theft

The Akira group claims that the stolen information is highly sensitive, encompassing various types of personal and professional documentation. According to the group's announcement, the data includes information belonging to both the firm's employees and its clients. The specific categories of data mentioned in the claim include:

• Employee personal data
• Client personal data
• Driver licenses
• Passports
• Social security numbers
• Legal files
• Court hearings
• Police reports
• Medical information
• Financial records

The breadth of the data described suggests a wide-ranging compromise of the firm's internal and client-facing databases. It is important to note that these details are based solely on the claims made by the Akira group.

About Bergman Dacey Goldsmith

Bergman Dacey Goldsmith (BDG Law Group) is a full-service law firm based in Los Angeles. The firm specializes in several key legal areas, including business litigation, construction law, and real estate law. Given the nature of their practice, the firm handles a variety of sensitive legal matters and client-related documentation.

Potential implications and industry risks

If the claims made by the Akira group are verified, the breach could lead to significant risks regarding client confidentiality and the protection of attorney-client privilege. Because the firm is based in the United States, such an incident could trigger legal proceedings under various state-level data protection laws and specific regulations, such as the Health Insurance Portability and Accountability Act (HIPAA), depending on the nature of the medical information involved.

The stolen data, if released, could be utilized by malicious actors for identity theft and highly targeted phishing attacks. The Akira group is known for employing double extortion tactics. In a double extortion scenario, attackers not only encrypt the victim's data to disrupt operations but also steal sensitive information to threaten its public release. This method is designed to maximize pressure on the organization by threatening their reputation and legal standing.

Such an attack can create intense pressure that may affect the firm's operational continuity. Furthermore, the impact of such a breach may extend beyond the firm itself, potentially causing indirect impacts on the firm's supply chain and various business partners who interact with the firm's data. Organizations in the professional services sector often face these risks and typically focus on robust data encryption, strict access controls, and comprehensive employee training to mitigate the potential for such breaches.