Capozzi Adler, P.C. Listed by bianlian Ransomware Group

On February 9, 2024, law firm Capozzi Adler, P.C. appeared on the leak site of the BianLian ransomware group. The firm, which specializes in healthcare regulatory compliance, Medicaid and Medicare reimbursement, guardianships, and senior-living operations, had its internal files exfiltrated during a ransomware attack. The disclosure does not quantify how many individuals or facilities may be affected, nor does it list the specific data types exposed beyond claiming that internal files were taken.

Details from the Leak-Site Listing

The primary disclosure on the BianLian onion site states that Capozzi Adler, P.C. suffered a ransomware incident and that attackers successfully exfiltrated internal files. No sample documents have been published at the time of the listing, and the site does not specify the volume of data or name any particular client records. The notification simply lists the firm’s domain and marks the matter as active under BianLian’s extortion campaign. Public reporting on similar BianLian listings indicates that the group typically posts victim names after an initial ransom deadline passes without payment.

Why This Matters for You and Your Family

If you or a family member have received care from a nursing facility, continuing-care retirement community, or other senior-living provider that works with Medicaid or Medicare, your personal information may have passed through Capozzi Adler’s systems. The firm handles guardianship papers, admission agreements, eligibility determinations, and reimbursement appeals — documents that routinely contain full names, dates of birth, Social Security numbers, medical histories, addresses, and financial details. When that information is stolen, the risk extends beyond the client to spouses, adult children acting as representatives, and sometimes grandchildren listed as emergency contacts.

The Doxxing and Identity-Chain Risks

Healthcare-law documents create long identity chains. A single guardianship file can link a senior’s Medicare number to an adult child’s email address, phone number, and home address. Attackers can then pivot to gaming accounts, social-media handles, or school records of younger family members who share the same household. Credential leaks of this nature frequently cascade into account takeovers because the same password used for a provider portal is reused on personal email or online banking. Children’s gaming accounts are especially vulnerable once an address or parent email is exposed, turning a legal breach into a vector for harassment, swatting, or further extortion.