Davis & Ferber listed on Akira ransomware leak site

• Ransomware group: Akira
• Country: United States
• Sector: Professional Services
• Announcement date: August 25, 2026

The Akira ransomware group has officially listed the New York-based law firm Davis & Ferber on its dedicated leak site. According to the threat actor's announcement, the group claims to have successfully exfiltrated a significant amount of corporate data from the firm's internal network.

The claimed attack and data exfiltration

The announcement regarding Davis & Ferber was posted on the Akira ransomware leak site on August 25, 2026. While the listing appeared recently, the threat actor claims that the actual attack occurred on October 8, 2025. The group asserts that they have obtained approximately 60 GB of corporate data from the organization's network infrastructure.

The Akira group has indicated that the stolen information is intended for publication in the near future. It is important to note that no screenshot was provided by the group to verify the contents of the stolen data, and no specific ransom demand has been made public in the current listing. The announcement is categorized as a data leak notification.

The types of data allegedly stolen

The threat actor claims that the stolen data contains a wide variety of sensitive personal and professional documentation. The information allegedly includes highly confidential files that could be used for malicious purposes if released. The specific categories of data mentioned in the claim include:

• Passport data
• Driver's license information
• Address information
• Social Security Numbers (SSN)
• Birth and death certificates
• Phone numbers
• Court files
• Police reports
• Non-disclosure agreements

About Davis & Ferber

Davis & Ferber LLP is a professional services firm located in New York. The law firm specializes in several distinct legal practice areas, including personal injury, medical malpractice, and motor vehicle accidents. Additionally, the firm provides legal expertise in matters involving nursing home abuse and family law.

Implications and risks for the legal sector

The alleged leak of such sensitive information poses significant risks to the firm's clients, potentially increasing their vulnerability to identity theft and various forms of fraud. Because Davis & Ferber operates as a law firm, the exposure of confidential client information could lead to serious legal repercussions under HIPAA and various state-level data protection regulations.

The tactics employed by the Akira group appear to follow the double-extortion model. In this scenario, attackers not only encrypt an organization's systems but also steal sensitive data to use as leverage. Even if the organization can restore its systems from backups, the threat of publishing the data creates additional pressure. This specific method often introduces the risk of secondary phishing attacks, where attackers use the stolen information to craft highly convincing fraudulent communications targeting the victims.

For organizations in the professional services sector, such incidents can place immense pressure on professional liability insurance and reputation management processes. Given the historical activity of the Akira group, it is necessary to evaluate the possibility that the attack was executed by exploiting vulnerabilities in VPN services. To defend against such threats, organizations typically focus on hardening remote access points, implementing strict multi-factor authentication, and maintaining rigorous monitoring of network traffic to detect unauthorized data exfiltration.