Daniels & Taylor, P.C. targeted by Akira ransomware group

• Ransomware group: Akira
• Country: United States
• Sector: Professional Services
• Announcement date: May 6, 2025

Akira ransomware group claims data breach at Daniels & Taylor, P.C.

The Akira ransomware group has claimed responsibility for a cyberattack targeting Daniels & Taylor, P.C., a professional services firm based in the United States. According to an announcement made on the group's leak site on May 6, 2025, the threat actors claim to have successfully exfiltrated a significant volume of corporate data from the law firm's network.

The group's announcement, which was posted on May 6, 2025, asserts that they have obtained over 70 GB of data. It is important to note that the group has not provided any screenshots to substantiate these claims. Consequently, the current understanding of the scope and nature of this alleged breach is based solely on the text statement provided by the Akira group on their leak site.

Details of the alleged data exfiltration

The Akira ransomware group has provided a description of the types of information they claim to have stolen during the incident. According to the group's statement, the leaked data is highly sensitive and includes a wide variety of personal and professional documentation. The information allegedly stolen includes:

• Client personal information
• Passports
• Medical records
• Driver's licenses
• Confidential court files
• Client financial data
• Non-disclosure agreements (NDAs)

The nature of this data suggests a highly targeted approach aimed at sensitive legal and personal documentation. While the group has made these claims, the lack of visual evidence means the full extent of the data compromise remains unverified through external means.

About Daniels & Taylor, P.C.

Daniels & Taylor, P.C. is a full-service law firm located in the United States. The firm serves its clients within Gwinnett County, Georgia, providing professional legal consulting and representation services across a broad spectrum of legal matters.

Impact and potential risks of the breach

This alleged breach carries significant implications for the firm's clients, potentially increasing their exposure to identity theft and various forms of fraud. Given that the organization operates as a law firm, the exposure of such sensitive information could lead to violations of client confidentiality. Such a breach may result in legal consequences under United States laws and regulations, such as the Health Insurance Portability and Accountability Act (HIPAA).

The Akira group is known for employing double extortion tactics. In such scenarios, attackers do not merely encrypt a victim's systems but also steal sensitive data, threatening to publish it on a leak site to pressure the organization into paying a ransom. The publication of this data can cause lasting damage to a firm's reputation and may facilitate secondary attacks against the organization or its clients. Furthermore, the leaked documents could potentially create supply chain risks and serve as a foundation for targeted phishing campaigns directed at the affected parties.

In the broader context of cybersecurity, ransomware attacks on professional service firms highlight the critical importance of robust data protection strategies. Organizations in this sector often handle highly sensitive information, making them attractive targets for sophisticated threat actors. To mitigate such risks, organizations typically focus on implementing multi-factor authentication, maintaining rigorous backup protocols, and conducting regular security awareness training to defend against social engineering and other common attack vectors.

Limited information on the threat actor

At this time, information regarding the Akira ransomware group remains limited. The group continues to be a notable presence in the ransomware landscape, utilizing extortion-based models to target various sectors.