Barnes Cohen and Sullivan Listed by Meow Ransomware Group

On October 10, 2024, the law firm Barnes Cohen and Sullivan appeared on the leak site operated by the meow ransomware group. The listing states that internal files were exfiltrated during a ransomware attack. The disclosure does not quantify how many individuals are affected, nor does it list specific data types beyond the broad category of internal files.

Details from the Leak-Site Listing

The primary disclosure on the meow leak site indicates that Barnes Cohen and Sullivan suffered a ransomware incident resulting in data exfiltration. As is common with these listings, the group has posted a sample of the allegedly stolen material and is threatening full publication unless the firm meets its demands. The exact volume of data and the full list of records exposed remain unknown because the disclosure does not provide those specifics. Ransomware.live mirrors the onion-site entry, claiming the October 10 publication date and the group’s claim that sensitive internal documents were taken.

Internal files exfiltrated is the only description given; no client names, case files, financial records, or personal identifiers are enumerated in the public listing itself.

Why This Matters for You and Your Family

If you or any member of your family has worked with Barnes Cohen and Sullivan, your personal information may now sit inside the attacker’s archive. Law firms routinely hold Social Security numbers, dates of birth, financial account details, medical records from injury cases, and correspondence that can reveal addresses, phone numbers, and family relationships. Even when the leak site does not publish every record immediately, the mere fact that the data has left the firm’s control creates long-term exposure. You cannot assume the information is safe simply because the full dataset has not yet been dumped publicly.

The Doxxing and Identity-Chain Risk

Stolen internal files from a law firm frequently contain enough fragments to link an individual’s real identity to online handles, email addresses, and phone numbers. Attackers and subsequent data brokers can chain these pieces together to build detailed profiles. A single leaked email can lead to gaming accounts, social-media profiles, and family-member records. Once those connections surface on other underground forums, the risk of targeted phishing, SIM-swapping, or full identity theft grows quickly. Credential leaks of this nature often cascade into account takeovers precisely because people reuse passwords across work, personal, and gaming services.

Meow Ransomware Group’s Known Track Record

Public reporting attributes the meow ransomware group’s emergence to mid-2023. The group is known for relatively low-profile operations that focus on smaller organizations and professional-service firms. Its typical playbook involves initial access through compromised remote-desktop credentials or phishing, followed by claimed exfiltration of documents before encryption. Rather than lengthy negotiations, meow tends to set short deadlines and then publishes samples on its leak site when payment is not received. While not as widely covered as some larger ransomware operations, meow has listed dozens of victims across legal, manufacturing, and healthcare sectors according to trackers that monitor ransomware.live and similar aggregator sites.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity so you can see exactly what chains back to the Barnes Cohen and Sullivan breach.
• Rotate any password you ever used at the firm anywhere else it is reused, and switch to 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure that touches you or your family is caught in hours, not months.
• Cover the household with DoxxScan family coverage that extends to dependents and children’s gaming accounts that often chain back to the same address or parent email.
• Let remediation specialists handle takedown requests across data brokers and leak sites on your behalf while you focus on securing accounts.

The breach of Barnes Cohen and Sullivan is a reminder that professional-service providers remain high-value targets whose compromises directly affect the privacy of ordinary clients and their families. Taking concrete steps now limits how far attackers and opportunists can travel down the identity chain created by this incident. Start your DoxxScan trial for continuous monitoring, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts.