Cohn Lifland Pearlman Herrmann and Knopf targeted by Akira ransomware group

• Ransomware group: Akira
• Country: United States
• Sector: Financial Services
• Announcement date: April 25, 2025

Akira ransomware group claims data breach at Cohn Lifland Pearlman Herrmann and Knopf

The Akira ransomware group has claimed responsibility for a data breach targeting Cohn Lifland Pearlman Herrmann and Knopf, a law firm based in the United States. According to an announcement made on a leak site on April 25, 2025, the threat actor group alleges that they have successfully compromised a significant amount of sensitive information belonging to the organization.

Details of the alleged attack and claims

The Akira ransomware group claims to have obtained 110 GB of data belonging to Cohn Lifland Pearlman Herrmann and Knopf. According to the group's announcement, the firm refused to pay a ransom demand. As a consequence of this refusal, the group stated that the stolen files will be published shortly. The claims regarding the attack were officially announced via a post on a ransomware leak site on April 25, 2025, with the group claiming the attack occurred on the same day.

Ransomware groups often utilize a double-extortion model during these types of incidents. In this model, attackers do not just encrypt a victim's systems to disrupt operations; they also exfiltrate sensitive data before the encryption phase. The threat of leaking this stolen data on public forums or leak sites serves as additional leverage to pressure the victim into paying the ransom. If the victim refuses to comply with the demands, the attackers proceed to release the information to the public, causing reputational and legal damage.

Alleged compromised data types

While the group has not provided any screenshots to verify the contents of the stolen files, they have listed several categories of sensitive information that were allegedly compromised. The data is said to include:

• Passport data
• Driver's license information
• Birth and death certificates
• Correspondence
• Address information
• Contact information
• Financial statements
• Other confidential firm documents

About Cohn Lifland Pearlman Herrmann and Knopf

Cohn Lifland Pearlman Herrmann and Knopf is a full-service law firm based in New Jersey. The firm provides legal consulting and representation services in various areas, including commercial litigation, personal injury, family law, and real estate.

Potential impact and security implications

This incident may pose a risk of exposing sensitive personal information belonging to the firm's clients. Given that the firm is based in the United States, data breach notification requirements under state laws and federal regulations may apply. The potential exposure of the firm's financial data may also create negative impacts on its business operations.

The leaked data could potentially be used for identity theft or targeted phishing attacks. For example, when highly specific personal documents like birth certificates, passports, and driver's licenses are compromised, attackers gain the necessary components to impersonate individuals. This makes the victims targets for sophisticated social engineering campaigns designed to extract further information or funds.

The Akira group is known to gain network access frequently through exploited VPN accounts. This highlights a common vulnerability in modern remote-access infrastructures. To defend against such threats, organizations in the legal and financial sectors often implement multi-factor authentication (MFA) on all external-facing services, particularly VPNs, and maintain strict monitoring of network access logs to detect unauthorized entry. Furthermore, robust data encryption and regular offline backups are standard defensive measures used to mitigate the impact of both data exfiltration and system encryption.