Erickson Thorpe & Swainston Listed by dragonforce Ransomware Group

On February 2, 2026, the Nevada-based law firm Erickson Thorpe & Swainston appeared on the leak site of the ransomware group DragonForce. The firm, which has represented clients in state and federal courts in Nevada and Northern California since 1969, had internal files exfiltrated during a ransomware attack.

Confirmed Details of the Breach

Public reporting indicates that DragonForce listed the firm on its leak site and claims to have stolen internal documents. The exact number of affected individuals remains unknown, and the specific types of data exposed have not been fully detailed in available reporting. The posting appeared on the group’s onion site, which is tracked by ransomware monitoring services such as ransomware.live.

February 2, 2026 marks the date the firm was publicly listed. No deadline for payment or further data publication has been confirmed in open sources. The breach follows the typical ransomware pattern of initial compromise, data exfiltration, and subsequent extortion pressure.

Why This Matters for You and Your Family

When a law firm’s internal files are stolen, the people whose records were stored there face real risk. Client names, addresses, phone numbers, financial details, court filings, and other sensitive personal information can end up in the hands of criminals. If your family has ever worked with a law firm in Nevada or Northern California, this incident could involve you.

Once data leaves a secure environment, it rarely stays contained. It can be sold, traded, or used to launch further attacks against you or your relatives. Children’s information, spouses’ information, and household addresses are frequently swept up in these leaks, creating long-term exposure.

The Doxxing and Identity-Chain Risk

Stolen legal files often contain enough personal details to link online handles, email addresses, phone numbers, and real-world identities. Criminals use these connections to build “identity chains” that let them target gaming accounts, social media profiles, and financial services. A single breach can therefore cascade into account takeovers, harassment, or identity theft that affects every member of a household.

Credential leaks like this one frequently expose passwords or password hints that people reuse across services. Gaming accounts belonging to you or your children are especially vulnerable because they often share the same email addresses or recovery phone numbers listed in legal documents.

DragonForce’s Publicly Known Track Record

Public reporting attributes DragonForce with emerging in late 2023 as a ransomware operation that combines double-extortion tactics with data leaks. The group has targeted organizations across multiple sectors, posting victim data on its dark-web leak site when ransom demands are not met. Its typical playbook involves gaining initial access through phishing or exploited vulnerabilities, exfiltrating files before encryption, and then pressuring victims with both encryption and public exposure of stolen data.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, with no-subscription cleanup of exposed records.
• Rotate any password you used at Erickson Thorpe & Swainston anywhere else it is reused, and switch to 2FA through an authenticator app instead of text messages.
• Enable continuous DoxxScan monitoring across 15.4B+ breach records and 100+ platforms so the next leak that touches your family is caught in hours rather than months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts that chain back to the same addresses and emails.
• Let remediation specialists handle takedown requests across data brokers and leak sites so you do not have to negotiate with threat actors yourself.

The incident shows how quickly a single organization’s security failure can reach ordinary families. Taking concrete steps now limits how far attackers can travel down the identity chain created by this breach. Start your DoxxScan trial and use its continuous monitoring, AI-powered identity-chain mapping, hands-on remediation by specialists, and household coverage—including children’s gaming accounts—to reduce the long-term impact of leaks like the one at Erickson Thorpe & Swainston.