Rosenblum Schwartz & Fry listed on Akira ransomware leak site

• Ransomware group: akira
• Country: United States
• Sector: Professional Services
• Announcement date: February 3, 2026

The law firm Rosenblum Schwartz & Fry has been listed on the leak site of the Akira ransomware group. The threat actor claims to have targeted the organization, alleging that a significant amount of sensitive information has been compromised during the attack.

The claimed attack and data theft

According to the announcement posted on the Akira ransomware group's leak site on February 3, 2026, the group intends to publish 1.3 TB of data allegedly belonging to Rosenblum Schwartz & Fry. The threat actor claims that the stolen data includes both operational and client-related information. While the listing was posted on the leak site, no screenshot was provided to verify the contents of the breach.

Ransomware attacks of this nature often involve a process known as double extortion. In this scenario, threat actors do not merely encrypt an organization's systems to disrupt operations; they also exfiltrate sensitive data. The attackers then use the threat of leaking this stolen information on public forums or leak sites to pressure the victim into paying a ransom. This method significantly increases the pressure on the victim, as the exposure of private data can lead to severe legal, regulatory, and reputational consequences.

Alleged sensitive data types

The listing claims to contain a wide variety of highly sensitive documents and personal identifiers. The data allegedly stolen includes:

• Passport data
• Driver's license information
• Social security numbers (SSN)
• Medical records
• Financial data
• Employee information
• Legal files
• Court files
• Police reports

About Rosenblum Schwartz & Fry

Rosenblum Schwartz & Fry, P.C. is a law firm based in Missouri, United States, specializing in criminal defense. The firm provides legal representation for clients facing both misdemeanor and felony criminal charges.

Analysis and potential impact

This alleged leak may increase the risk of identity theft and fraud for the law firm's clients. Given that the institution is based in the US, it may face data privacy obligations under state laws and federal regulations. The publication of such data could damage the firm's reputation and create significant risks regarding client confidentiality, especially considering the sensitive nature of criminal defense legal work.

Furthermore, it is possible that the leaked data could be utilized in targeted phishing campaigns for secondary attacks. When sensitive identifiers like social security numbers or medical records are exposed, attackers can craft highly convincing messages to deceive individuals or employees, leading to further compromises within the organization or its client base.

Regarding the threat actor, public information about the Akira group is limited. However, their tendency to exploit VPN vulnerabilities may necessitate a re-evaluation of the firm's network security. For organizations in the professional services sector, maintaining robust security postures is critical. Common defensive steps for organizations facing these types of threats include implementing multi-factor authentication (MFA) across all remote access points, such as VPNs, ensuring regular patching of all network edge devices, and conducting regular security awareness training to help employees recognize phishing attempts. Additionally, maintaining offline, immutable backups can help mitigate the impact of the encryption phase of a ransomware attack, though it does not prevent the data exfiltration associated with double extortion.