attorneykohm.com Listed by VanHelsing Ransomware Group

On March 31, 2025, the law firm of Texas attorney David Kohm appeared on the leak site of the VanHelsing ransomware group, with internal files exfiltrated during a ransomware attack on attorneykohm.com.

Reported Details of the Incident

Public reporting indicates the firm, which operates offices throughout the Dallas-Fort Worth area and has represented clients for more than 25 years, had data taken in the attack. The exposed material consists of internal files; the exact number of people whose records were allegedly stolen remains unknown. The listing on the VanHelsing leak site states that negotiations between the attackers and the firm either failed or never occurred.

March 31, 2025 marks the public disclosure date. Because the breach involves a law firm, the files are likely to contain sensitive client information including financial details, legal case files, and personal identifiers.

Why This Matters for You and Your Family

When a law firm that handles your financial, family, or personal legal matters is breached, the information stolen can directly affect you. Attorneys routinely store Social Security numbers, bank account records, tax documents, medical information tied to injury claims, and family court records. If those files leave the firm’s control, they become raw material for identity theft, fraudulent loan applications, or targeted scams that feel personal because the scammers already know details only your lawyer should have.

Ordinary families who hired the firm for estate planning, divorce, personal injury, or probate work now face the quiet risk that their private information sits on a ransomware leak site. The breach does not require you to have been a headline victim; simply being a client puts your household on the list of potential targets.

The Doxxing and Identity-Chain Risk

Ransomware leaks rarely stop at one company. Once internal files are public, attackers and opportunistic criminals scan them for email addresses, phone numbers, client names, and any linked accounts. These pieces are then fed into automated tools that connect your work email to your personal social media, your children’s gaming usernames, and your home address. The result is an identity chain that turns a single breach into repeated harassment, doxxing attempts, or credential-stuffing attacks across every service where you reused a password.

Credential leaks like this one cascade into account takeovers and doxxing chains, especially when gaming accounts belonging to children share the same family address or recovery email listed in the stolen legal files.

VanHelsing’s Publicly Known Track Record

Public reporting attributes the VanHelsing ransomware group with emerging in late 2023. The group has targeted organizations across multiple sectors, with a playbook that typically begins with phishing or exploitation of remote desktop services, followed by rapid exfiltration of sensitive files before encryption. Their extortion style combines public leak-site pressure with direct threats to release client or patient data if ransom demands are not met. Notable prior victims include other professional-services firms whose internal documents contained personal client records.

What to Do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity so you can see exactly what chains back to the Kohm firm breach.
• Rotate any password you ever used at attorneykohm.com or related legal portals anywhere it has been reused, and switch on 2FA through an authenticator app rather than text messages.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next time your information appears it is caught in hours, not months.
• Cover the household with DoxxScan family coverage that extends to dependents and your children’s gaming accounts that could chain back to the same leaked address or recovery details.
• Let remediation specialists handle takedown requests across data brokers and leak sites for you while you focus on securing your own accounts.

The most important step is treating this claimed breach as the start of a chain rather than a single event. Start your DoxxScan trial today and let its AI-powered identity-chain mapping plus hands-on remediation by specialists work to protect you and your family—including any gaming accounts that could become the next link in a doxxing campaign.