Field and Goldberg targeted by Akira ransomware group

• Ransomware group: Akira
• Country: United States
• Sector: Professional Services
• Announcement date: October 6, 2025

Akira ransomware group claims data breach at Field and Goldberg

The Akira ransomware group has claimed responsibility for a data breach involving the United States-based law firm Field and Goldberg. According to an announcement posted on a leak site on October 6, 2025, the threat actor group alleges they have successfully exfiltrated a significant volume of sensitive information belonging to the organization.

The group claims to have listed over 232 GB of data on their platform. This alleged breach involves the unauthorized access to the firm's corporate documents and various types of personal information. While the announcement was published on October 6, 2025, and the group claims the attack occurred on the same date, the specific details regarding the method of entry or the exact nature of the intrusion remain undisclosed by the attackers.

Details of the alleged data exfiltration

The announcement made by the Akira group specifies that the stolen information includes a wide array of sensitive documentation. The group alleges that the data contains critical business and personal records that could impact both the firm and its clients. No screenshots were provided by the group to verify the contents of the stolen data.

The types of data reportedly involved in this incident include:

• Financial data (audit reports, payment details, invoices)
• Employee and customer information
• Passports
• Identification numbers
• Emails
• Phone numbers
• Non-disclosure agreements (NDAs)
• Other documents containing personal information

This variety of data suggests a broad compromise of the firm's digital environment, covering both operational business functions and highly sensitive personal identifiers.

About Field and Goldberg

Field and Goldberg, LLC is a law firm based in Chicago, Illinois. The firm specializes in several key areas of legal practice, including real estate taxation, transactions, and litigation. They provide a comprehensive range of legal services to a diverse client base, which includes condo associations, commercial properties, banks, and apartment buildings.

Analysis and potential implications of the leak

This alleged leak poses several significant risks. For the clients and employees of the firm, the exposure of such sensitive information—particularly passports and identification numbers—may create secondary risks such as identity theft and targeted phishing attacks. When personal contact information like emails and phone numbers are leaked, the likelihood of social engineering attacks increases significantly.

For a professional services firm specializing in legal matters, the exposure of this data could potentially violate attorney-client privilege. This breach of confidentiality may increase professional liability risks for the firm. Furthermore, as the organization is located in the United States, the incident may trigger legal proceedings under relevant state laws and data protection regulations.

The Akira group is known for employing double-extortion tactics. In these scenarios, attackers not only encrypt an organization's systems but also steal sensitive data to use as leverage, threatening to publish it on leak sites to pressure the victim into paying a ransom. The publication of such data can negatively impact a firm's reputation and weaken its overall supply chain security. To defend against such threats, organizations typically implement robust security measures, such as multi-factor authentication, regular data backups, and continuous monitoring of their network environments to detect unauthorized access early.