Kassin & Carrow Listed by lynx Ransomware Group

On January 18, 2025, the lynx Ransomware Group listed Kassin & Carrow, a personal injury law firm serving clients in the St. Louis and Metro East Illinois area, on its leak site. The firm’s internal files were allegedly exfiltrated during a ransomware attack, and the listing on the lynx leak site means that sensitive client and employee information may now be available to criminals.

What's Publicly Reported from Reporting

Public reporting indicates that Kassin & Carrow operates offices in Edwardsville, Illinois, and St. Peters, Missouri, and has represented clients from surrounding communities including Wentzville, Warrenton, St. Charles, and Kirkwood. The lynx Ransomware Group posted the firm to its public leak site on January 18, 2025. Available reporting describes the data as internal files exfiltrated in a ransomware attack. The exact number of individuals affected remains unknown, but law firm client records typically contain names, addresses, dates of birth, Social Security numbers, medical records, insurance details, and contact information for both clients and their families.

Why This Matters for You and Your Family

If you or anyone in your household has ever been a client of Kassin & Carrow, your personal information could be in the hands of extortionists. Medical records and Social Security numbers are especially damaging because they allow identity thieves to open accounts, file fraudulent tax returns, or apply for government benefits in your name. Even if you were not directly named in the leak, family members listed as emergency contacts, co-signers, or minors on a case file can also be exposed. Criminals do not limit themselves to one victim; one set of leaked credentials or personal details can lead to repeated targeting of everyone connected to that household.

The Doxxing and Identity-Chain Implications

Ransomware groups like this one rarely stop at posting data. Once internal files appear on a leak site, the information is often sold or shared on dark-web forums where doxxers combine it with other breaches. A single email or phone number from the Kassin & Carrow files can be linked to your gaming accounts, social-media handles, or children’s online profiles. This creates an identity chain that lets attackers move from financial fraud to full doxxing—publishing your home address, children’s names and schools, or live locations. Credential leaks of this kind frequently cascade into account takeovers on gaming platforms, where children’s accounts become entry points for further harassment or extortion.

The Lynx Ransomware Group’s Track Record

Public reporting attributes the group’s emergence to 2024. The lynx Ransomware Group has targeted organizations across multiple sectors, with prior victims including healthcare providers, manufacturers, and professional services firms. Their typical playbook begins with initial access gained through phishing or exploited remote desktop credentials, followed by exfiltration of sensitive files and deployment of ransomware. They then demand payment for decryption and non-disclosure; when unpaid, they publish samples or full datasets on their leak site to pressure victims. Reporting notes that their extortion style combines data leaks with direct threats to notify customers or regulators.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, handles, and real identity so you can see exactly what the Kassin & Carrow breach connects to.
• Rotate any password you used at Kassin & Carrow or on related accounts, replace it with a unique passphrase, and enable 2FA through an authenticator app rather than text messages.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next time your information surfaces you learn within hours instead of months.
• Cover the household with DoxxScan family coverage that extends to dependents and children’s gaming accounts that often chain back to the same leaked address or parent email.
• Let remediation specialists handle takedown requests across data brokers and leak sites for you while you focus on securing your own accounts.

The Kassin & Carrow breach is a reminder that law firms hold some of the most intimate details about ordinary families, and that data may now be for sale. Taking concrete steps now can break the chain before criminals turn a single breach into long-term harassment or identity theft. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1B+ breach records and 100+ platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and household coverage that includes children’s gaming accounts. Start your DoxxScan trial today and put specialists to work protecting your family.