Cohn Lifland Pearlman Herrmann and Knopf Listed by akira Ransomware Group

On April 25, 2025, the Akira ransomware group listed the New Jersey law firm Cohn Lifland Pearlman Herrmann and Knopf on its leak site, claiming to have stolen 110 GB of internal files containing clients’ passports, driver’s licenses, birth and death certificates, addresses, contacts, correspondence and other sensitive personal records.

What's Publicly Reported from Reporting

Public reporting on the Akira leak site describes the exfiltrated material as including both client personal documents and the firm’s own confidential records such as financial statements. The attackers stated the firm maintained an active cyber insurance policy yet still refused to pay the ransom demand. Available reporting indicates the data was taken during a ransomware intrusion and is scheduled for public release if no agreement is reached. The precise number of individuals whose records were taken remains unknown, but the volume and nature of the files suggest thousands of current and former clients are likely affected.

Why This Matters for You and Your Family

When a law firm that handles estates, family matters, real estate closings or litigation suffers a breach, the exposed data is exactly the kind of information identity thieves and stalkers need. Passports, driver’s licenses, birth certificates and home addresses can be combined to open accounts, file fraudulent tax returns, or impersonate you at government agencies. If your family has ever used this firm—or any firm that shares records with it—your information may now sit in a ransomware data dump. The breach also underscores that even organizations you trust to protect your private life can lose control of it in a single cyber incident.

The Doxxing and Identity-Chain Implications

Documents like these do not exist in isolation. A scanned driver’s license often lists your date of birth, address and full legal name. That information can be cross-referenced with emails, phone numbers or usernames found in other breaches to build a complete profile. Once attackers link your real identity to online handles, the risk spreads to social media accounts, banking logins and, crucially, gaming platforms used by you or your children. Credential leaks of this type frequently cascade into account takeovers that expose chat logs, friend lists and location data, turning a single breach into a persistent doxxing chain that can last for years.

Akira’s Publicly Known Track Record

Public reporting attributes the Akira ransomware group with emerging in 2023. The gang has targeted organizations across North America, Europe and Australia, including manufacturing, healthcare, legal and education victims. Their typical playbook involves initial access through compromised remote desktop credentials or phishing, followed by exfiltration of sensitive files before deploying encryption. Akira operators then demand ransom and, if unpaid, publish samples or full datasets on their leak site to pressure victims. In this case they publicly noted the firm’s refusal to pay despite holding cyber insurance, a common shaming tactic the group has used before.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, addresses and real identity so you can see exactly what this leak connects to.
• Rotate any password you used at the firm or with any service that shares its records, then enable 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure of your data is caught in hours, not months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts, which often become entry points when credential leaks cascade into takeovers.
• Let remediation specialists handle the time-consuming work of submitting takedown requests to data brokers and monitoring sites that republish stolen information.

The incident shows that waiting for a breach notice is no longer enough; proactive visibility and rapid response are required to limit damage once records leave trusted hands. Start your DoxxScan trial and let its continuous monitoring, AI-powered identity-chain mapping, hands-on remediation by specialists and household coverage—including children’s gaming accounts—work for your family before the next leak appears on a ransomware site.