Gress Clark Young & Schoepper data allegedly leaked by Rhysida ransomware group

• Ransomware group: Rhysida
• Country: United States
• Sector: Professional Services
• Announcement date: October 10, 2026

Rhysida claims to have stolen data from Gress Clark Young & Schoepper

The Rhysida ransomware group has listed approximately 166.4 GB of data on its leak site, claiming the information belongs to the law firm Gress Clark Young & Schoepper. The group announced the breach on October 10, 2026, alleging that the data was compromised on the same day.

The group is employing a double-extortion tactic by threatening to release this information. Double extortion is a common ransomware strategy where attackers do not just encrypt an organization's systems to disrupt operations, but also steal sensitive data beforehand. The threat of leaking this stolen information serves as additional leverage to pressure the victim into paying a ransom.

Details of the alleged data breach

According to the announcement made by the Rhysida group, the stolen data includes the firm's financial records, client information, and case management documentation. The alleged leak consists of 167,804 files. The group claims that the breach provides access to a wide variety of sensitive documents and credentials.

The specific types of data identified in the claim include:

• Banking details
• Social Security Numbers (SSN)
• Medical records
• Financial documents
• Signatures
• Driver's license copies

Beyond these categories, the group alleges that the stolen content includes signed forms such as W-9, I-9, and W-4, as well as BIIA case-management documents and QuickBooks financial files. Furthermore, the claim mentions the presence of voided checks, medical photos, X-rays, PHI/APF records, correspondence with physicians, and credentials for the SPC e-file system.

About Gress Clark Young & Schoepper

Gress Clark Young & Schoepper is a law firm based in Washington state. They specialize primarily in workers' compensation and insurance law.

Potential impact and risks of the leak

This alleged data breach may pose a significant risk due to the exposure of sensitive medical and financial information belonging to clients. The inclusion of Social Security Numbers and identification documents could facilitate identity theft and targeted phishing campaigns against the affected individuals. Furthermore, the disclosure of case-related documentation may compromise client confidentiality and the integrity of ongoing legal proceedings.

The firm may face potential legal consequences and regulatory scrutiny under US laws and relevant state privacy mandates. Given the known tactics of the Rhysida group, it is likely that this data will be leveraged for further extortion. In such scenarios, organizations often face the complex challenge of managing legal liabilities while attempting to mitigate the damage caused by the exposure of private client data.