Black , Bashor & Porsch Listed by SilentRansomGroup Ransomware Group

On January 14, 2025, the accounting firm Black, Bashor & Porsch appeared on the leak site of the ransomware group SilentRansomGroup. The listing indicates that internal files were exfiltrated during a ransomware attack on the firm, which provides accounting services to individuals and families across the United States.

What Public Reporting Shows

Available reporting describes the incident as a ransomware deployment that resulted in both encryption of systems and exfiltration of data. The exact number of affected individuals remains unknown, as neither the firm nor the threat group has released a full victim list. Public reporting indicates the exposed material consists of internal files that would typically include client financial records, tax documents, Social Security numbers, bank account details, and correspondence containing personally identifiable information.

The data was published on the group’s leak site, a common tactic used to pressure victims into payment. No specific deadline for ransom payment has been publicly confirmed in this case, though such groups routinely issue demands within days or weeks of initial access.

Why It Matters for You and Your Family

If you or your family have ever used an accounting firm for tax preparation, bookkeeping, payroll, or financial planning, your information may now sit in a publicly accessible ransomware repository. Tax returns, W-2s, 1099s, and bank routing information are among the most valuable records for identity thieves because they provide everything needed to file fraudulent returns, open accounts, or request new credit cards in your name.

Unlike a single credit-card breach, an accounting firm compromise can expose years of historical financial data for every member of a household. Children’s records are often included in family tax filings, creating long-term risks that extend well into adulthood.

The Doxxing and Identity-Chain Implications

Once internal files leave a company’s control, attackers and opportunistic criminals routinely cross-reference the stolen data with information already circulating on criminal forums. An email address found in one document can be linked to usernames on social media, gaming platforms, or shopping sites. Phone numbers tie those accounts to physical addresses. Over time, these connections form an identity chain that makes targeted harassment, SIM-swapping, or full account takeover far easier.

Credential leaks like this one cascade into account takeovers and doxxing chains, especially when gaming accounts belonging to children share the same email or password patterns used for family financial services. A single exposed tax document can therefore endanger not only your credit but also the online identities of everyone in your household.

SilentRansomGroup’s Publicly Known Track Record

Public reporting attributes SilentRansomGroup with emerging in late 2023 as a ransomware-as-a-service operation. The group has claimed responsibility for attacks on dozens of organizations, many in professional services sectors including accounting, legal, and healthcare. Notable prior victims have included mid-sized U.S. businesses whose client data was later used for secondary extortion against those clients.

The group’s typical playbook begins with initial access gained through phishing, compromised remote desktop credentials, or exploited vulnerabilities in unpatched software. Once inside, operators exfiltrate sensitive files before deploying ransomware. They then publish samples on their leak site and demand payment to prevent full data release. If unpaid, they often follow up with direct contact to affected clients whose information appears in the stolen files.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, usernames, and real-world identity so you can see exactly what this claimed breach has exposed.
• Rotate the passwords you used at Black, Bashor & Porsch anywhere else they appear, then enable two-factor authentication through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next time your information surfaces you learn within hours instead of months.
• Cover the household with DoxxScan family coverage that extends to dependents and children’s gaming accounts that often chain back to the same addresses and emails.
• Let remediation specialists handle takedown requests across data brokers and leak sites while you focus on securing your own accounts.

The incident underscores a simple reality: your accountant’s security practices directly affect your family’s long-term privacy. Starting with a clear picture of where your data currently sits online is the most practical step you can take today. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping that connects handles to real identities, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts.