On March 03, 2024, Centennial Law Group LLP appeared on the Medusa ransomware group’s leak site. The Canadian law firm, which serves private and corporate clients from its Hamilton, Ontario office, is the latest victim publicly listed after refusing or failing to meet the attackers’ demands. Anyone whose legal files, contracts, or personal information passed through the firm may now face heightened exposure.
Already exposed?
You can’t unleak data. You can take away what it’s worth.
A leaked record is where it starts, not where it ends. What turns it into your front door is the look-up sites publishing your address beside your name — and those are what an AI reads when somebody asks about you. The free scan shows you both. We write to 580 companies.
See what is exposed about you — free scan →Watch Centennial Law Group LLP
Get alerted the next time Centennial Law Group LLP files a breach with any US regulator — the filing, dated and sourced. A free single-company slice of Signals; no account needed.
We’ll email you only about Centennial Law Group LLP’s future breach filings and how to watch a whole vendor list — not general marketing. Unsubscribe any time.
Watching your whole vendor list (50 to 500 companies, by tier) is GalaxyWarden Signals.
Details from the Medusa Listing
The Medusa leak site states that internal files were exfiltrated during a ransomware attack on Centennial Law Group LLP. The listing does not quantify how many records were taken, name specific document types, or disclose the ransom amount demanded. It simply states that data was stolen and is now published because the firm did not pay. The disclosure also notes the firm’s address at 25 Main St W Ste 1702, Hamilton, Ontario, and its roughly 17 employees, details that help attackers add pressure through public shaming.
Internal files exfiltrated is the only description of the compromised material provided. No client list, no volume of records, and no sample documents are detailed on the initial listing page itself, though Medusa typically releases proof packets once a victim is fully published.
Why This Matters for You and Your Family
If you or any member of your family retained Centennial Law Group for estate planning, real-estate closings, divorce, corporate formation, or any other legal matter, your documents may now sit on a dark-web leak site. Law firms hold the most sensitive records many people ever create: Social Insurance Numbers, bank account details, family medical history, child custody agreements, and full home addresses. Once these files leave the firm’s control, they become permanent ammunition for identity thieves, stalkers, or fraudsters who buy the data on underground forums.