Swartz Campbell listed on Interlock ransomware leak site

• Ransomware group: Interlock
• Country: United States
• Sector: Professional Services
• Announcement date: December 22, 2025

Interlock claims data breach at Swartz Campbell

The threat actor known as Interlock has listed the law firm Swartz Campbell on its leak site, claiming to have obtained access to various file directories. This announcement, made on December 22, 2025, suggests a significant breach of the firm's digital infrastructure. While the group has posted the organization's name on its platform, specific details regarding the volume of data or the exact nature of the intrusion remain unconfirmed by the victim.

The group's method appears to rely on a double extortion strategy. In such scenarios, ransomware actors do not merely encrypt a victim's systems to disrupt operations; they also exfiltrate sensitive information to use as leverage. By listing the organization on a public leak site, the attackers attempt to exert maximum pressure on the victim to meet ransom demands by threatening the public disclosure of private data.

Details of the alleged intrusion

According to the information provided by the threat actor, the group has gained access to several directory structures within the firm's environment. The announcement includes a directory tree structure that highlights the potential scope of the access. The screenshot provided by the attackers displays several folder names, including 'Accounting Management', 'ARCHIVED FILES', 'Users', 'vol1root', and 'WS'.

The specific content of the alleged leaked data is not explicitly detailed in the announcement. However, given the professional nature of the targeted organization, the directories suggest that the breach may involve sensitive information. The following types of data are identified as being potentially affected:

• Accounting data
• User data
• Archived files

Information regarding the Interlock group itself remains limited in the public domain, making it difficult to determine their specific tactics, techniques, or procedures beyond this current incident.

About Swartz Campbell

Swartz Campbell is a law firm that has been operating since 1921. The firm maintains a significant presence across the East Coast of the United States. It specializes in a wide range of legal services, including employment law, medical malpractice, class action suits, and divorce cases.

Potential implications and organizational risks

As a law firm, this breach may pose a severe risk to the disclosure of sensitive data protected by attorney-client privilege. The exposure of such information can have profound legal and ethical consequences. Being a US-based entity, the firm may face various implications under state-level data breach notification laws and potential legal liabilities resulting from the incident.

The exposed data could lead to several secondary risks, such as identity theft or targeted phishing attacks directed at the firm's clients and employees. Furthermore, the organization may experience negative impacts on its operational continuity and its professional reputation. The loss of client trust is a significant concern for professional service firms following a data exposure.

For organizations operating in the professional services sector, such incidents underscore the importance of robust cybersecurity frameworks. Common defensive steps include implementing multi-factor authentication, maintaining rigorous patch management schedules, and conducting regular offline backups to mitigate the impact of encryption-based attacks. Additionally, monitoring for unauthorized access to sensitive directories and implementing strict data loss prevention measures can help reduce the likelihood of successful data exfiltration.