Gearhiser Peters Elliott & Cannon Listed by lynx Ransomware Group

On April 24, 2025, the law firm Gearhiser Peters Elliott & Cannon, PLLC appeared on the leak site of the lynx ransomware group. The firm, which handles litigation, business formation, and personal legal matters for individuals and companies across the United States, had internal files exfiltrated during a ransomware attack.

What's Publicly Reported from Reporting

Public reporting indicates the firm was listed on the lynx leak site that same day. The data consists of internal files taken after the attackers gained access to the firm’s systems. The exact number of people whose information may have been exposed remains unknown. No specific deadline for payment or further data publication has been publicly detailed in available reporting. The firm provides general and specialized legal services to individuals, new businesses, and established companies.

Why This Matters for You and Your Family

When a law firm that handles personal legal matters is breached, the documents taken can contain names, addresses, dates of birth, Social Security numbers, financial details, and other sensitive information belonging to ordinary clients. If you or anyone in your family has worked with Gearhiser Peters Elliott & Cannon, your private records may now sit on a ransomware leak site. That exposure puts you at immediate risk of identity theft, fraudulent loans opened in your name, and long-term fraud that can damage your credit for years. Even if you were not a direct client, family members or household members who shared information with an affected client can still be pulled into the fallout.

The Doxxing and Identity-Chain Risks

Ransomware groups rarely stop at one leak. Once internal files leave a law firm, attackers or opportunistic criminals can comb them for email addresses, phone numbers, and account details. These pieces often link to your online handles, social-media profiles, and children’s gaming accounts. A single credential exposed in the breach can be tested across banking, email, and gaming platforms, creating a chain that ends in full doxxing. Public reporting on similar incidents shows that children’s usernames and shared family passwords are frequently part of these cascading takeovers. Credential leaks like this one cascade into account takeovers and doxxing chains.

What to Do

• Run a DoxxScan to map every link between your emails, phone numbers, handles, and real identity, then use the included cleanup of data-broker listings tied to the breach.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure of your information is caught and addressed in hours rather than months.
• Rotate any password you used at Gearhiser Peters Elliott & Cannon anywhere else it appears, and switch to 2FA through an authenticator app instead of text messages.
• Cover the entire household with DoxxScan family protection that extends to dependents and children’s gaming accounts, which often chain back to the same address or parent email.
• Let remediation specialists handle ongoing takedown requests for any personal records that surface from this incident.

The incident shows that even regional law firms holding ordinary families’ private records remain prime targets. A forward-looking approach means treating every new breach as a signal to lock down the connections that attackers exploit. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping that links handles to real identities, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts. Starting that process promptly gives you and your family the best chance of staying ahead of the next stage of this claimed breach.