Miller & Caggiano listed on dragonforce ransomware leak site

• Ransomware group: dragonforce
• Country: United States
• Sector: Professional Services
• Announcement date: April 13, 2025

The United States-based law firm Miller & Caggiano has been listed on the leak site of the ransomware group known as dragonforce. The listing, which was discovered on April 13, 2025, indicates that the group claims to have compromised the institution's data. According to the group's announcement, the targeted attack is claimed to have taken place on April 9, 2025.

The details of the alleged attack

The dragonforce group has officially listed Miller & Caggiano on its dedicated leak platform. While the presence of the firm on the site was identified on April 13, 2025, the group alleges that the actual compromise of the institution occurred a few days prior, on April 9, 2025. The group asserts that they have successfully accessed and compromised the data belonging to the firm.

In many modern ransomware operations, groups utilize leak sites to exert pressure on victims. These sites serve as a public platform where threat actors post information about their targets to increase the visibility of the breach. This tactic is often associated with double extortion, where attackers not only encrypt an organization's systems but also threaten to release sensitive information to force a ransom payment. While the specific mechanisms of this particular incident remain unconfirmed, the listing on a leak site is a common indicator of such high-pressure tactics.

Information regarding the compromised data

Regarding the specific details of the breach, the listing provided by the dragonforce group does not offer granular information. There is no detailed information provided on the listing regarding the nature or the specific content of the allegedly compromised data. Furthermore, the listing does not specify the volume of files involved or the total size of the data claimed to be stolen.

The only visual evidence provided in the source is a screenshot that displays a verification screen used to access the group's leak site. The listing names no specific data types that have been compromised.

About Miller & Caggiano

Miller Caggiano & Kaplan, LLP is a law firm specializing in advocating for the rights of injured and disabled workers regarding compensation and disability claims. Founded by partners with backgrounds in organized labor, the firm focuses primarily on labor rights and workplace injury cases.

Risk assessment and organizational implications

The potential exposure of information in a legal environment carries significant implications. As a law firm, the potential exposure of client information and sensitive legal documents may pose secondary risks such as identity theft or fraud for the affected individuals. The sensitive nature of legal files often includes personal identifiers and confidential details that are highly valued by malicious actors.

Because the institution is based in the United States, a confirmed data breach could trigger notification requirements under relevant state laws and federal regulations. Organizations in the legal sector must be prepared to navigate these complex regulatory landscapes following a security incident. Additionally, due to the nature of the firm's operations, the risk of the leaked data being utilized in supply chain attacks or targeted phishing campaigns should be considered. Attackers often use stolen professional data to craft highly convincing social engineering attacks against a firm's clients or partners.

It is also worth noting that the dragonforce group reportedly follows a model of providing infrastructure to affiliates. This means there is a possibility that the attack may have been carried out by different actors using the group's platform. For organizations in the professional services sector, maintaining robust defensive postures—such as implementing multi-factor authentication, rigorous patch management, and continuous monitoring—is essential to mitigate the risks posed by such sophisticated threat actors.