Murphy Pearson Bradley & Feeney targeted by Akira ransomware group

• Ransomware group: Akira
• Country: United States
• Sector: Professional Services
• Announcement date: May 22, 2025

Akira ransomware group claims data breach at Murphy Pearson Bradley & Feeney

The Akira ransomware group has announced a significant data breach involving the United States-based law firm Murphy Pearson Bradley & Feeney. According to an announcement made on a leak site on May 22, 2025, the threat actor group claims to have exfiltrated 182 GB of data belonging to the organization. This incident follows a reported cyberattack that allegedly took place on April 10, 2025.

Ransomware attacks often involve a tactic known as double extortion. In these scenarios, attackers do not merely encrypt an organization's files to disrupt operations; they also steal sensitive information before the encryption process begins. The threat actors then threaten to leak this stolen data on public forums or leak sites if a ransom is not paid. This approach places immense pressure on organizations by threatening their reputation and legal standing through the public exposure of private information.

Details of the alleged exfiltration

The Akira group claims that the stolen data is accessible via the torrent protocol. According to the group's listing, the exfiltrated information includes sensitive data related to the firm's business operations and various client records. While the group has made these claims, no screenshots were provided in the leak site announcement to verify the content of the stolen files.

The listing specifies that the following types of data have been allegedly compromised:

• Employee personal data
• Client personal data
• Birth and death certificates
• Passport information
• Driver's licenses
• Non-disclosure agreements (NDAs)
• Court records
• Financial data

About Murphy Pearson Bradley & Feeney

Murphy Pearson Bradley & Feeney is a professional services firm located in the United States. The firm specializes in trial practice, litigation, and business counseling. They provide a wide range of legal services to both corporate and individual clients, handling matters that often involve highly sensitive and confidential information.

Potential impact and industry implications

The exposure of the data claimed by the Akira group carries significant risks. For the clients of Murphy Pearson Bradley & Feeney, the theft of personal identifiers—such as passports, driver's licenses, and vital records—increases the risk of identity theft and fraudulent activities. Furthermore, because the firm handles legal proceedings, the exposure of court records and non-disclosure agreements (NDAs) could lead to the disclosure of trade secrets and potentially compromise ongoing legal matters.

Given that the organization is based in the United States, the breach may trigger specific legal obligations. The firm may face mandatory data breach notification requirements under various state laws and federal regulations depending on the nature of the data and the residency of the affected individuals.

In the professional services sector, protecting client confidentiality is a cornerstone of business operations. Organizations in this sector often implement defensive measures such as multi-factor authentication (MFA), robust encryption for data at rest and in transit, and continuous monitoring of network traffic to detect unauthorized exfiltration. As the Akira group's public information remains limited, the incident highlights the evolving threat posed by ransomware groups that utilize public leak sites to maximize the impact of their extortion attempts.