Matthews Law Listed by medusa Ransomware Group

On April 22, 2025, the Medusa ransomware group added Matthews Law to its leak site, claiming that internal files from the New Zealand law firm had been exfiltrated following a ransomware attack.

What's Publicly Reported from Reporting

Public reporting indicates the firm, which also offers conflict resolution services, is based at 48 Shortland Street, Auckland 1010, and employs 10 people. The Medusa leak page lists the incident but does not disclose the exact number of affected individuals or the full volume of data taken. Available reporting describes the exposed material as internal files; no customer records, court documents, or specific data types such as names, addresses, or financial details have been publicly detailed by the group. The listing appeared on the Medusa onion site, with details mirrored on ransomware tracking platforms such as ransomware.live.

Why This Matters for You and Your Family

When a law firm’s internal files are stolen, any personal or family information that was ever shared with them can end up in attackers’ hands. Even a single leaked email, phone number, or case note can serve as the starting point for identity theft, phishing, or harassment. If you or your family have used Matthews Law for legal advice, mediation, employment matters, or any other service, your information may now sit on a ransomware server. Ordinary people rarely discover these exposures until weeks or months later, by which time the data may already have been sold or published.

The Doxxing and Identity-Chain Risks

Ransomware groups rarely stop at one dataset. A leaked work email can be cross-referenced with social-media handles, children’s gaming usernames, or shared family phone numbers. Once attackers map these connections, they can impersonate you, target your relatives, or sell the full profile on underground forums. Credential leaks of this kind frequently cascade into account takeovers on email, banking, and gaming platforms. Gaming accounts belonging to you or your children are especially vulnerable because they often reuse passwords or recovery details that appear in professional data sets.

Medusa’s Publicly Known Track Record

Public reporting attributes Medusa with emerging in 2021. The group has targeted hospitals, schools, manufacturers, and professional services firms worldwide. Its typical playbook involves initial access through phishing or exploited remote desktop services, followed by exfiltration of sensitive files before encryption. Medusa then demands payment and, if unpaid, publishes samples or full datasets on its leak site to pressure victims. The group’s extortion style combines data leaks with direct threats to notify customers, regulators, or the media.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, handles, and real-world identity so you can see exactly what this claimed breach connects to.
• Rotate any password you used at Matthews Law anywhere else it is reused, and switch on two-factor authentication through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure is flagged within hours instead of months.
• Cover the household with DoxxScan family protection, which includes dependents and children’s gaming accounts that can be chained back to the same leaked address or contact details.
• Let remediation specialists handle takedown requests across data brokers and leak sites while you focus on securing your own accounts.

The incident shows that professional services used by ordinary families can quickly become gateways for wider identity compromise. Taking concrete steps now limits how far attackers can travel along the chain that begins with this leak. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that explicitly protects children’s gaming accounts. Starting your DoxxScan trial gives you and your family the visibility and support needed to close off exposure before it escalates.