Garlick & Markison Listed by losttrust Ransomware Group

On September 26, 2023, boutique patent law firm Garlick & Markison appeared on the leak site of the losttrust ransomware group. The listing states that internal files were exfiltrated during a ransomware attack. The firm has not published a public breach notification, and the leak-site entry does not disclose the number of records affected or the precise data types contained in the stolen material.

Reported Details from the Listing

The losttrust leak site, mirrored on ransomware.live, lists Garlick & Markison as a victim and claims the firm’s internal files were taken. No sample data has been published in the initial listing, and the disclosure does not quantify how many documents or client records were allegedly exfiltrated. The entry simply states that a ransomware deployment occurred and that data was removed from the firm’s network prior to encryption. Because the primary source provides no further technical detail, the exact systems compromised and the full scope of information at risk remain unknown to the public.

Why This Matters for You and Your Family

When a law firm that builds patent portfolios for technology clients is breached, the stolen files can contain highly sensitive business plans, invention disclosures, and correspondence that tie individuals and companies to specific intellectual property. If your name, address, email, phone number, or Social Security number appears in any of those documents, the exposure creates long-term identity risk. Even if you have never directly hired the firm, client lists, vendor records, or opposing-party information included in case files can still place you in the crosshairs. Patent-related records often stay valuable for years, which means this claimed breach could surface on underground markets long after the initial extortion window closes.

Doxxing and Identity-Chain Risks

Ransomware operators rarely stop at the first trove of stolen data. Once internal files leave a law firm’s control, attackers or subsequent buyers can map email addresses, personal phone numbers, and employee names to external accounts. A single reused password found in the exfiltrated material can unlock online banking, government portals, or social-media profiles. These linkages form identity chains that allow doxxing campaigns to escalate quickly. Children’s gaming accounts tied to a parent’s email address are especially vulnerable because gamers frequently reuse credentials across entertainment platforms and school-related logins. The result is a cascading exposure that can affect every member of a household for years.

Losttrust Group Track Record

Public reporting attributes the losttrust ransomware operation to a group that emerged in early 2023. The actors typically gain initial access through phishing or exploited remote-desktop services, exfiltrate documents before deploying encryption, and then post victim names on their leak site when ransom demands go unpaid. Notable prior targets have included manufacturing companies, professional service firms, and healthcare providers. Their playbook relies on sustained pressure through data publication rather than immediate mass leaks, giving them leverage during negotiations while gradually increasing the public visibility of each victim. The exact origin of the group remains unclear, but its tactics align with double-extortion models now standard among mid-tier ransomware operations.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, then use the cleanup of Warden to remove what you can.
• Rotate any password you ever used at Garlick & Markison or related patent services, and switch to a unique passphrase at every other site where it was reused.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure is caught in hours rather than months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts that often chain back to the same addresses and credentials.
• Let remediation specialists handle ongoing takedown requests across data brokers and leak sites on your behalf.

The losttrust listing is a concrete reminder that even specialized professional firms can become gateways to personal exposure. Acting quickly on credential hygiene and identity mapping limits how far attackers can travel down the chains that begin with this claimed breach. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts. Start your DoxxScan trial today and close the gaps before the next wave of misuse appears.