On June 18, 2026, the Montana law firm Berg Lilly was listed on the leak site of the Akira ransomware group. The firm, which has provided legal services in Bozeman for more than 60 years, saw its internal files targeted in a ransomware attack. Public reporting indicates the attackers plan to upload 50GB of corporate data that includes clients’ passports, Social Security numbers, driver’s licenses, addresses, phone numbers, confidential files, medical information, financial records, court hearings, and police reports.
Already exposed?
You can’t unleak data. You can take away what it’s worth.
A leaked record is where it starts, not where it ends. What turns it into your front door is the look-up sites publishing your address beside your name — and those are what an AI reads when somebody asks about you. The free scan shows you both. We write to 580 companies.
See what is exposed about you — free scan →Watch Berg Lilly
Get alerted the next time Berg Lilly files a breach with any US regulator — the filing, dated and sourced. A free single-company slice of Signals; no account needed.
We’ll email you only about Berg Lilly’s future breach filings and how to watch a whole vendor list — not general marketing. Unsubscribe any time.
Watching your whole vendor list (50 to 500 companies, by tier) is GalaxyWarden Signals.
What Public Reporting Shows
Available reporting describes Berg Lilly as a full-service law firm handling business law, civil litigation, commercial transactions, construction law, employment law, estate planning, personal injury, and real estate matters. The Akira group posted the firm to its leak site and stated it would soon release the 50GB archive. No exact number of affected clients has been confirmed, but the exposed material includes highly sensitive personal and legal documents belonging to individuals and families who used the firm’s services.
The breach follows the typical ransomware pattern of initial access, data exfiltration, and subsequent extortion through public leaks. Industry research from sources such as DoxxScan™ continuous monitoring indicates that law-firm incidents frequently expose exactly the categories of records now listed by Akira.
Why This Matters for You and Your Family
When a law firm that holds your estate plan, personal injury records, or real-estate closing documents is breached, the information lands in the hands of criminals who can use it for identity theft, fraudulent loans, or targeted scams. SSNs, passports, driver’s licenses, and medical information are especially dangerous because they allow thieves to open accounts, file false tax returns, or impersonate you in official settings. Even if you are not certain your records were included, the uncertainty itself creates stress for any family that has trusted the firm with private matters.