Epperson Law Group listed on interlock leak site

• Ransomware group: interlock
• Country: United States
• Sector: Professional Services
• Announcement date: August 12, 2025

Interlock claims data breach at Epperson Law Group

The ransomware group known as interlock has listed the Epperson Law Group on its leak site, claiming to have gained access to the institution's systems. According to the announcement made on August 12, 2025, the group alleges that they have exfiltrated approximately 1 TB of data from the organization.

Ransomware attacks often involve a strategy known as double extortion, where threat actors not only encrypt an organization's files to disrupt operations but also steal sensitive information. The goal is to pressure the victim into paying a ransom by threatening to leak the stolen data on public forums or specialized leak sites. This method increases the pressure on the target, as the loss of confidentiality can be just as damaging as the loss of availability.

Claims of negligence and security failures

In its announcement, the interlock group has leveled accusations against the Epperson Law Group, claiming that the institution was negligent regarding its security measures. The attackers allege that this lack of adequate protection has compromised the safety and security of both the law firm and its clients.

To support their claims, the group provided a screenshot displaying various directory structures. These directories appear to represent the stolen data, with the total size of the displayed folders amounting to approximately 1 TB. This visual evidence is a common tactic used by ransomware groups to demonstrate the scale of their successful intrusion and to increase the pressure on the victim during negotiations.

Details of the alleged data exfiltration

The screenshot provided by the attackers shows several specific folders that appear to contain the stolen information. These include folders labeled 'EppLaw Files' (987.3GB), 'Users' (43.0GB), and 'Scans' (83.5KB). While the exact nature and specific content of every file have not been fully confirmed, the scale and the nature of the organization suggest the potential for highly sensitive information to be involved.

Based on the types of folders identified, the listing suggests that the following types of data may have been affected:

• Client information
• Legal documents
• User data

For organizations in the legal sector, such breaches are particularly critical. Law firms handle a vast array of confidential documentation, including sensitive client communications, private legal strategies, and personal identification details. The exposure of such data can lead to significant privacy violations and long-term consequences for the individuals involved.

Organization profile

Epperson Law Group is a law firm based in North Carolina, United States. They specialize in providing legal services in areas such as family law, divorce, and child custody.

Potential impact and industry implications

This incident highlights the significant risk of sensitive client data exposure for law firms and professional service providers. Given that the Epperson Law Group is a United States-based entity, the firm may face legal consequences under state-level data privacy laws and professional conduct regulations. The exposure of such information can lead to severe reputational damage and operational disruptions that may hinder the firm's ability to serve its clients.

Furthermore, there is a possibility that clients could be subjected to identity theft or targeted phishing attacks if their personal information is leaked. When attackers possess detailed legal or personal documentation, they can craft highly convincing social engineering attacks against the victims.

To defend against such threats, organizations in the professional services sector can implement several defensive steps. These include enforcing multi-factor authentication (MFA) across all systems, maintaining robust and regular backups that are isolated from the main network, and conducting regular security awareness training for all employees. Additionally, implementing strict access controls and monitoring network traffic for unusual data transfers can help detect and mitigate exfiltration attempts before they reach a critical scale.