Moses & Singer Listed by SilentRansomGroup Ransomware Group

On August 02, 2026, the ransomware group SilentRansomGroup listed Moses & Singer LLP on its leak site, claiming the prominent New York law firm had been hit by a ransomware attack in which internal files were exfiltrated. The organization has not, as of this writing, issued any public confirmation or regulatory notification about the incident.

Primary Disclosure Details

The leak-site listing states that Moses & Singer suffered a ransomware attack and that attackers successfully exfiltrated internal files. No specific volume of records is provided, nor does the listing detail the exact categories of data taken. The disclosure indicates the firm was given a deadline to negotiate before additional material would be published. Because the sole primary source is the threat actor’s own leak page hosted on a ransomware tracker, this remains an unconfirmed claim. Moses & Singer has not publicly acknowledged any breach, data theft, or extortion attempt.

Why This Matters for You and Your Family

When a law firm’s internal files are stolen, the exposure often reaches far beyond the firm itself. Clients, business partners, employees, and their families can have sensitive personal and financial information contained in contracts, correspondence, due-diligence folders, or billing records. Even without an exact count of affected individuals, the disclosure indicates that any data taken could include names, addresses, Social Security numbers, financial account details, and legal matters that adversaries can weaponize for identity theft, fraud, or targeted phishing. If you or your family have ever been a client of Moses & Singer, or if your employer has worked with them on corporate transactions, intellectual property, or litigation, your information may now sit in an attacker’s archive.

Doxxing and Identity-Chain Risks

Ransomware operators rarely stop at posting a single sample. They frequently release compressed archives or searchable databases that allow other criminals to cross-reference stolen data with information from previous breaches. This creates long-term doxxing chains: an email address found in the Moses & Singer files can be linked to accounts on other platforms, revealing home addresses, family member names, and even children’s information. Credential leaks of this type frequently cascade into gaming account takeovers, where attackers use corporate email passwords to seize Roblox, Fortnite, Steam, or Discord accounts belonging to dependents. Once those accounts are compromised, further personal details are harvested and sold, lengthening the identity exposure timeline for years.

SilentRansomGroup’s Known Track Record

Public reporting attributes SilentRansomGroup as a relatively new double-extortion ransomware operation that emerged in late 2025. The group is known for targeting mid-sized professional services firms, including law practices and consultancies. Their typical playbook involves initial access through phishing or exploited remote desktop services, followed by rapid lateral movement, data exfiltration, and then deployment of ransomware. After encryption, they pressure victims through both file-leak threats and direct extortion calls. While the group is still building its reputation, prior listings show they follow through on publishing data when demands are not met, often in batches over several weeks.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, usernames, and real-world identity, including any potential connection to Moses & Singer matters.
• Enable continuous DoxxScan monitoring across 15.4 billion breach records and more than 100 platforms so the next exposure surfaces in hours rather than months.
• Rotate any password you have ever used at Moses & Singer or related services, and secure every account with 2FA through an authenticator app rather than SMS.
• Cover your entire household with DoxxScan family protection, which extends to dependents and children’s gaming accounts that often chain back to the same breached credentials.
• Let remediation specialists handle ongoing data-broker takedown requests and monitoring for any samples that appear from this claim.

The incident underscores how quickly a single unconfirmed ransomware claim can create persistent risk for ordinary people whose data travels through professional firms. Acting early limits how far attackers and downstream criminals can travel along your identity chain. DoxxScan by GalaxyWarden delivers continuous monitoring across 15.4B+ breach records and 100+ platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts. Source: https://www.ransomware.live/id/TW9zZXMgJiBTaW5nZXJAU2lsZW50UmFuc29tR3JvdXA=