Adelman & Gettleman Listed by akira Ransomware Group

On December 17, 2025, the Chicago-based boutique law firm Adelman & Gettleman appeared on the leak site of the Akira ransomware group. The attackers claim they will soon upload 31 GB of the firm’s internal files, including client and employee records containing passports, driver’s licenses, Social Security numbers, financial documents, court files, police reports, and other confidential materials.

Reported Details from Reporting

Public reporting on the Akira leak site indicates the firm was hit by a ransomware attack in which data was exfiltrated before encryption. The group has posted a notice promising to release the full 31 GB archive containing sensitive personal and corporate information. No exact number of affected individuals has been disclosed, but the types of records described suggest both current and former clients as well as employees are potentially exposed. The firm specializes in commercial insolvency, bankruptcy, and related litigation and has operated in Chicago for more than 40 years.

Why This Matters for You and Your Family

When a law firm that handles bankruptcy, financial distress, and court matters is breached, the consequences reach far beyond the company’s walls. If you or anyone in your family has ever been a client, the exposed files could contain your full name, address, date of birth, Social Security number, financial history, and court-related documents. Passports, driver’s licenses, and SSNs are particularly dangerous because they allow identity thieves to open accounts, file fraudulent tax returns, or impersonate you in official systems. Even if you were not a direct client, employee data or information about related parties can still create risk for ordinary people whose records ended up in the firm’s systems.

The Doxxing and Identity-Chain Risks

Stolen identity documents rarely stay isolated. A single leaked SSN or driver’s license can be combined with email addresses, phone numbers, or usernames found in other breaches to build a complete profile. Attackers then use these chains to take over accounts, impersonate family members, or sell the bundle on dark-web marketplaces. Credential leaks like this one frequently cascade into gaming account takeovers, especially for children whose usernames and passwords are sometimes stored alongside family records. Once an attacker controls a gaming account tied to the same email or address, they can pivot to further personal details or use the account for social engineering.

Akira’s Publicly Known Track Record

Public reporting attributes the attack to the Akira ransomware group. The group emerged in 2023 and has since targeted organizations across multiple sectors with a consistent playbook: gain initial access, exfiltrate data, deploy ransomware to encrypt systems, and then extort victims by threatening to publish the stolen files on their leak site. Notable prior victims include companies in manufacturing, healthcare, and professional services. Akira typically posts samples and countdown notices before releasing full archives, a pattern observed in this incident.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, usernames, and real-world identity so you can see exactly what this claimed breach connects to.
• Rotate any password you used at Adelman & Gettleman or related services, then enable two-factor authentication through an authenticator app on every account where that password was reused.
• Enable continuous DoxxScan monitoring across 13.1 billion+ breach records and more than 100 platforms so the next leak exposing you or your family is caught and addressed in hours rather than months.
• Cover the entire household with DoxxScan family protection, which includes dependents and children’s gaming accounts that often chain back to the same addresses or parent emails.
• Let DoxxScan remediation specialists handle takedown requests for any exposed personal records appearing on data-broker or underground sites.

The incident shows how quickly professional services data can surface on ransomware leak sites and fuel larger identity crimes. Taking concrete steps now limits how far attackers can travel down the chain. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1B+ breach records and 100+ platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts. Start your DoxxScan trial today to gain visibility and control before the next breach compounds this one.