Morris-Sockle listed on Qilin ransomware leak site

• Ransomware group: Qilin
• Country: United States
• Sector: Professional Services
• Announcement date: October 14, 2025

The Qilin ransomware group has announced the listing of the United States-based law firm Morris-Sockle on its dedicated leak site. According to the announcement made on October 14, 2025, the threat actor group claims to have successfully exfiltrated data from the institution, marking a potential cyberattack targeting the firm's operations.

The claimed attack and event details

The incident was officially announced by the Qilin ransomware group on October 14, 2025. The group's public listing serves as a claim that they have gained unauthorized access to the firm's systems and successfully extracted information. This type of announcement is a common tactic used by ransomware groups to signal a successful breach and to exert pressure on the target organization.

While the group has publicly claimed to have exfiltrated data from the institution, the specific details regarding the timing and the exact nature of the breach remain tied to the group's own claims. The listing suggests a targeted effort to disrupt the operations of the law firm through the threat of data exposure.

Data involved in the listing

Regarding the specific contents of the alleged breach, the record does not provide explicit details. The listing names no specific data types or categories of information that have been stolen.

The nature of the leaked data is not explicitly specified in the record or the provided documentation. There is no information available regarding the total volume of data or the specific file count involved in this incident. Furthermore, the group has not issued a specific ransom demand at this time, and the exact contents of the exfiltrated information remain unconfirmed.

Potential implications of the breach

Given that the entity is a law firm, the alleged leaked data may contain sensitive client information and family law records. This situation could pose secondary risks to affected individuals, such as identity theft and targeted phishing attacks. Such risks are common when sensitive personal information is compromised in a cyberattack.

Organization profile

Morris-Sockle, PLLC is a law firm specializing in family law and divorce cases with over 40 years of experience. Operating in Washington state, the firm provides comprehensive legal services focused on divorce processes and the protection of client rights.

Analysis and organizational impact

The involvement of a law firm in a ransomware incident carries significant implications. Since the Qilin group is known to employ double-extortion tactics, there is a possibility that the data may be published or sold to exert pressure on the institution. Double-extortion is a method where attackers not only encrypt an organization's data but also threaten to leak sensitive information on a public leak site to increase the likelihood of a ransom payment.

As the institution is based in the US, a potential data breach may lead to legal consequences under state-level privacy laws and professional conduct regulations. Organizations in the professional services sector must navigate complex regulatory landscapes when dealing with sensitive client data.

To mitigate such risks, organizations typically focus on robust defensive measures. These include implementing multi-factor authentication, maintaining regular offline backups, and conducting regular security awareness training for employees. Furthermore, monitoring for unauthorized data exfiltration and maintaining a comprehensive incident response plan are essential steps for organizations handling sensitive legal and personal information to protect against the evolving tactics used by ransomware groups.