On March 17, 2025, the Lepant Law Office in Nebraska appeared on the leak site of the qilin ransomware group, with the attackers claiming to have exfiltrated internal files from the firm’s systems.
Already exposed?
You can’t unleak data. You can take away what it’s worth.
A leaked record is where it starts, not where it ends. What turns it into your front door is the look-up sites publishing your address beside your name — and those are what an AI reads when somebody asks about you. The free scan shows you both. We write to 580 companies.
See what is exposed about you — free scan →Watch Lepant Law Office
Get alerted the next time Lepant Law Office files a breach with any US regulator — the filing, dated and sourced. A free single-company slice of Signals; no account needed.
We’ll email you only about Lepant Law Office’s future breach filings and how to watch a whole vendor list — not general marketing. Unsubscribe any time.
Watching your whole vendor list (50 to 500 companies, by tier) is GalaxyWarden Signals.
What Public Reporting Shows
Public reporting indicates that qilin posted details of the incident on its dark-web leak portal, accessible via the .onion link tracked by ransomware.live. The firm, a successor to earlier Nebraska law practices and led by attorney David Lepant, had its internal documents taken during a ransomware intrusion. Available reporting describes the exposed material as internal files, though the precise volume and full list of data types remain unconfirmed by the firm itself. No exact victim count inside the law office or among its clients has been publicly disclosed. The posting follows the group’s typical pattern of publishing samples or announcements after encryption and data exfiltration.
Why This Matters for You and Your Family
When a law office’s internal files are stolen, the information often includes client names, addresses, phone numbers, email accounts, Social Security numbers, financial records, and case details. If your family has ever worked with a small or mid-sized law practice — for estate planning, real estate, family law, or personal injury — your data may now sit in a ransomware repository. That exposure does not vanish when the news cycle moves on. It can surface months or years later in identity theft, targeted scams, or doxxing attempts aimed at you or your children.
Credential leaks like this one frequently cascade into account takeovers across email, banking, and online services where the same password was reused.