Epperson Law Group Listed by interlock Ransomware Group

On August 12, 2025, the Epperson Law Group appeared on the leak site of the interlock ransomware group after the firm failed to meet the attackers’ demands. Internal files containing sensitive client information were allegedly exfiltrated, leaving thousands of individuals whose legal matters were handled by the firm at risk of identity theft and exposure.

What Public Reporting Shows

Public reporting indicates that interlock added Epperson Law Group to its data-leak portal on August 12, 2025. The firm is a personal-injury and accident law practice whose systems were compromised in a ransomware incident. Available reporting describes the exposed material as internal files that include client records. The exact number of affected individuals remains unknown, but law firms of this type routinely hold names, addresses, dates of birth, Social Security numbers, medical records, insurance details, and financial information for clients and their families.

The attackers followed their standard pattern: encrypt systems, exfiltrate data before encryption, then threaten to publish the stolen information unless a ransom is paid. No evidence has surfaced that the firm paid, which is why the files were listed publicly.

Why This Matters for You and Your Family

When a law firm that holds your personal injury claim, divorce papers, or estate documents is breached, the information that once existed only in a protected legal file can suddenly appear on the dark web. Client records often contain the precise details criminals need to open new accounts, file fraudulent tax returns, or impersonate you with insurers and banks. If your family has ever used a personal-injury attorney, the odds are higher than you think that at least one record tied to your household may now be circulating. Children’s information is frequently included in family claims, creating long-term risks that can follow them into adulthood.

The Doxxing and Identity-Chain Implications

A single breach like this rarely stays isolated. Criminals combine the newly leaked legal files with usernames, emails, and phone numbers already exposed in earlier incidents. This creates an identity chain that links your real name and address to gaming accounts, social-media handles, and family members. Once the chain is mapped, targeted doxxing, swatting, or SIM-swapping attacks become far easier. Credential leaks of this kind routinely cascade into account takeovers on Steam, Roblox, Discord, and other platforms where your children may have accounts tied to the same email address used in legal correspondence.

Interlock Ransomware Group’s Track Record

Public reporting attributes interlock with emerging in late 2024. The group has targeted healthcare providers, educational institutions, and professional-services firms. Its typical playbook begins with initial access gained through phishing or exploited remote-desktop credentials, followed by rapid lateral movement, data exfiltration, and deployment of ransomware. After encryption, the operators wait a short period before publishing samples on their leak site and giving victims a narrow deadline to pay. Extortion demands usually combine threats of data publication with offers to delete the files upon payment. The group maintains an active presence on dark-web leak portals, updating them regularly with new victims.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, handles, and real identity so you can see exactly what the Epperson breach connects to.
• Rotate any password you used at the law firm or on any site that shares the same email address, then enable 2FA through an authenticator app rather than text messages.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next leak that touches your family is caught in hours, not months.
• Cover the household with DoxxScan family coverage that extends to dependents and children’s gaming accounts that often chain back to the same addresses and emails.
• Let remediation specialists handle takedown requests across data brokers and leak sites so you do not have to negotiate with threat actors yourself.

The breach of Epperson Law Group is a reminder that your most sensitive personal documents can be exposed through no fault of your own. Taking concrete steps now limits how far attackers can travel down the identity chain before you stop them. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts. Start your DoxxScan trial today and close the gaps the interlock group is counting on.