DUTTONFIRM.COM Listed by Clop Ransomware Group

On December 22, 2022, the Iowa-based Dutton Law Firm appeared on the leak site operated by the Clop ransomware group. The listing states that internal files were exfiltrated during a ransomware attack on duttonfirm.com. The disclosure does not specify the number of people affected or list exact data types beyond claiming that sensitive internal documents were taken.

Details from the Leak Site

The Clop leak page for Dutton Firm indicates the law practice was hit by a ransomware operation and that attackers successfully removed files before encryption. No victim count is provided, and the listing does not detail the volume or specific categories of records. The notice follows the group’s standard format of naming the target, posting a sample of allegedly stolen material, and threatening further publication if demands are not met. Public mirrors of the onion site, such as those tracked on ransomware.live, preserve the original December 2022 entry.

Why This Matters for You and Your Family

When a law firm’s internal files are stolen, the exposure often includes documents containing names, addresses, dates of birth, Social Security numbers, medical details from personal-injury cases, financial records, and attorney-client correspondence. Even though the exact contents are not quantified in the disclosure, any of these elements can be used to open accounts in your name, file fraudulent tax returns, or impersonate you with insurance companies. If you or a family member worked with Dutton Law Firm for an injury claim, divorce matter, or estate issue around or before late 2022, your information may now sit in an attacker’s archive. The breach therefore creates long-term identity risk that does not expire when the leak site posting is removed.

Doxxing and Identity-Chain Implications

Stolen legal files frequently link email addresses, phone numbers, home addresses, and client names together. Attackers can combine this information with credential leaks from other breaches to map an entire household. A single exposed email can lead to gaming-account takeovers for children, because many family members reuse passwords or security questions derived from personal events handled by the law firm. Once an attacker controls a child’s gaming handle tied to the same address or phone number, further doxxing becomes trivial. Credential leaks like this one cascade into account takeovers and doxxing chains that stretch far beyond the original breach.

Clop’s Publicly Known Track Record

Public reporting attributes the first major activity of Clop (sometimes stylized as Cl0p) to 2019. The group rose to prominence in 2021–2022 after adopting a double-extortion model that combined ransomware encryption with public shaming on their leak site. Notable prior victims include large corporations and professional-services firms whose internal documents contained sensitive client data. Clop’s typical playbook begins with initial access gained through compromised remote-desktop credentials or vulnerable file-transfer software, followed by extensive exfiltration over weeks or months before encryption. The group then posts samples on their onion site and sets deadlines for payment, threatening to release the full archive. The Dutton Firm listing fits this pattern exactly.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, addresses, and real-world identity, then use the cleanup of Warden to remove what you can.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure surfaces in hours rather than months.
• Rotate any password you ever used at Dutton Law Firm or on duttonfirm.com wherever it has been reused, and switch to 2FA through an authenticator app instead of text messages.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts that can chain back to the same leaked address or phone number.
• Let remediation specialists handle ongoing takedown requests for any personal documents that surface on data-broker or extortion sites.

The breach of Dutton Law Firm shows that even regional professional offices can become gateways to widespread identity exposure. A single listing on a ransomware site can quietly feed identity thieves and doxxers for years. Starting with DoxxScan’s continuous monitoring, AI-powered identity-chain mapping, and hands-on remediation by specialists gives you and your family the clearest path to closing those gaps before they widen. Its household coverage also protects children’s gaming accounts that often become the next link in the chain.