Salvi, Schostok & Pritchard P.C. Listed by frag Ransomware Group

On October 18, 2024, the Illinois-based law firm Salvi, Schostok & Pritchard P.C. appeared on the leak site operated by the frag Ransomware Group. The firm, which specializes in medical malpractice and personal injury cases, had its internal files exfiltrated during a ransomware attack. The listing states that frag actors successfully extracted customer medical documents, contact information of clients and employees, partnership agreements, licenses, contracts, and Medicare documents. The number of people affected remains unknown.

Details from the Leak Site Listing

The frag leak site posting states the law firm was hit by a ransomware operation and that attackers exfiltrated documents rather than simply encrypting them. It lists specific categories of stolen material: customer medical documents, contact information of clients and employees, partnership agreements, licenses and contracts, and Medicare documents. The disclosure does not quantify how many records were taken or name individual victims. No ransom demand figure is published on the listing.

Why This Matters for You and Your Family

If you or anyone in your household has ever been a client of Salvi, Schostok & Pritchard P.C., your medical history, contact details, and possibly Medicare information may now sit on a criminal leak site. Even if you were never a client, the firm’s employee contact data could expose current or former staff members and their families. Medical records and government program documents are especially damaging because they tie your health information directly to your identity, address, and financial relationships. Once this material reaches underground forums, it can be repackaged and sold for years.

The Doxxing and Identity-Chain Risks

Medical documents and client contact lists create long identity chains. An attacker who obtains your name, phone number, and medical details can cross-reference them with data from previous breaches to build a complete profile. This profile often links to email addresses, family member names, and even children’s online gaming accounts. Credential leaks of this type frequently cascade into account takeovers across personal and household services. DoxxScan by GalaxyWarden continuously monitors 13.1B+ breach records and 100+ platforms with AI-powered identity-chain mapping and hands-on remediation by specialists, including coverage for your family and children’s gaming accounts that can become entry points for further doxxing.

Frag Ransomware Group’s Known Track Record

Public reporting attributes the frag Ransomware Group with emerging in early 2024 as a double-extortion operation. The group is known for targeting mid-sized organizations, including professional services firms, and follows a standard playbook: initial access often gained through phishing or exploited remote desktop services, followed by exfiltration of sensitive files before encryption. After exfiltration, frag posts samples on its leak site and pressures victims with deadlines to pay or face full data publication. Their prior victims have included entities in healthcare-adjacent and legal sectors, though exact prior cases are still being tracked by threat intelligence teams.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, with cleanup handled by GalaxyWarden specialists.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure of your data is caught in hours rather than months.
• Rotate any password you have ever used at the firm or related services, and switch on 2FA through an authenticator app everywhere that password was reused.
• Cover the entire household with DoxxScan family protection that extends to dependents and children’s gaming accounts often chained to the same address and identity details.
• Let remediation specialists manage takedown requests for any exposed documents or personal listings that appear on data broker or underground sites.

The exposure of medical and client records from a trusted law firm shows how quickly personal health data can move from protected systems into criminal hands. Taking concrete steps now limits how far attackers can travel down the identity chain created by this claimed breach. Start your DoxxScan trial today to gain continuous monitoring, identity-chain mapping, and specialist remediation that protects you and your family long after this incident fades from the headlines.