On August 29, 2025, the Akron, Ohio-based law firm Ross, Brittain & Schonberg Co., LPA appeared on the leak site of the Akira ransomware group. The attackers claim they have exfiltrated 66 GB of internal files containing police reports, hearing protocols, client and employee records, and a wide range of personal information including full names, dates of birth, addresses, emails, phone numbers, Social Security numbers, driver’s licenses, financial documents, and NDAs.
Already exposed?
You can’t unleak data. You can take away what it’s worth.
A leaked record is where it starts, not where it ends. What turns it into your front door is the look-up sites publishing your address beside your name — and those are what an AI reads when somebody asks about you. The free scan shows you both. We write to 580 companies.
See what is exposed about you — free scan →Watch Ross
Get alerted the next time Ross files a breach with any US regulator — the filing, dated and sourced. A free single-company slice of Signals; no account needed.
We’ll email you only about Ross’s future breach filings and how to watch a whole vendor list — not general marketing. Unsubscribe any time.
Watching your whole vendor list (50 to 500 companies, by tier) is GalaxyWarden Signals.
Reported Details of the Breach
Public reporting indicates the firm, which specializes in labor law, employment law, workers’ compensation, and OSHA matters, was hit by a ransomware attack. The Akira group posted a notice stating they intend to publish the 66 GB of corporate data. The exposed material includes sensitive legal files as well as documents belonging to both clients and employees. No exact number of affected individuals has been confirmed, but the breadth of data types suggests thousands of people could be impacted. The leak site posting serves as both proof of compromise and a public extortion tactic.
Why This Matters for You and Your Family
When a law firm that handles employment disputes, workplace injuries, and regulatory matters suffers a breach, the people whose information ends up exposed are often ordinary workers and their families. SSNs, driver’s licenses, dates of birth, and home addresses are exactly the ingredients identity thieves need to open accounts, file fraudulent tax returns, or impersonate victims. Even if you were never a direct client, your information may have been shared in a workers’ compensation claim, an HR file, or a workplace investigation handled by the firm. Once these details are loose on a ransomware leak site, they can circulate for years.
The Doxxing and Identity-Chain Risk
Credential leaks like this one rarely stop at a single company. Emails, phone numbers, and passwords harvested here can be combined with data from other breaches to map out your entire digital life. Attackers chain these fragments together to locate social-media accounts, gaming profiles, and family connections. This is precisely why gaming accounts belonging to you or your children are at heightened risk: the same email or reused password often protects both work-related services and Steam, Roblox, or Fortnite logins. A single exposed record can trigger a cascade of account takeovers, doxxing, and harassment that reaches every member of the household.