Schaad Balass Menzl & Partner Listed by Deadlock Ransomware

On July 25, 2026, the Swiss intellectual property law firm Schaad Balass Menzl & Partner AG was listed on the leak site operated by the Deadlock ransomware group. The listing claims the attackers successfully exfiltrated internal files from the firm, which specializes in patent, trademark, and design law. Anyone whose personal or business records passed through the firm in recent years may now be exposed.

Reported Details from the Leak Site

The primary disclosure on ransomware.live states that Deadlock added Schaad Balass Menzl & Partner to its public leak page and posted samples of allegedly stolen internal files. The notification does not quantify the number of records affected, nor does it specify exactly which types of documents were taken. It simply confirms that data was exfiltrated and is now held by the group. The firm has not yet issued a public breach notification detailing the incident, so the full scope remains unknown to the public.

Why This Matters for You and Your Family

When a specialized law firm like Schaad Balass Menzl & Partner suffers a ransomware breach, the exposure often reaches beyond corporate clients. Internal files frequently contain names, addresses, contact details, identification numbers, patent filings, trademark applications, correspondence, and financial records of private individuals and families. If you have ever filed a patent, registered a trademark, defended intellectual property, or worked with the firm in any capacity, your personal information may now sit in an attacker-controlled archive. This kind of breach creates long-term risk because legal documents often include family members’ details, children’s names, and home addresses that do not appear in ordinary consumer breaches.

The Doxxing and Identity-Chain Risk

Legal firm data is particularly dangerous for doxxing chains. A single leaked document can link your real name to email addresses, phone numbers, client IDs, and sometimes even passport or national ID copies. Attackers and subsequent data resellers can combine this with other breaches to build complete identity profiles. These profiles are then used for targeted phishing, account takeovers, identity theft, and harassment. Credential leaks of this nature also cascade into gaming accounts belonging to you or your children, where the same email and password combinations are frequently reused, turning a professional breach into a household compromise.

Deadlock Ransomware Track Record

Public reporting attributes Deadlock with emerging in late 2023 as a double-extortion ransomware operation. The group is known for breaching organizations across Europe and North America, exfiltrating data before encrypting systems, and then publishing samples on their leak site when victims refuse to pay. Notable prior victims include manufacturing companies, professional services firms, and healthcare providers. Their typical playbook involves initial access through compromised remote desktop credentials or phishing, followed by lateral movement, data exfiltration over several days, and aggressive extortion pressure that includes direct contact with the victim’s clients and partners. The Schaad Balass Menzl & Partner listing fits this established pattern.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, including any exposure tied to Schaad Balass Menzl & Partner.
• Rotate passwords used with the firm or any related service anywhere they are reused, and enable 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 15.4B+ breach records and 100+ platforms so the next exposure surfaces within hours instead of months.
• Cover the entire household with DoxxScan family protection, which extends to dependents and children’s gaming accounts that often chain back to the same leaked credentials and addresses.
• Let remediation specialists handle data broker takedown requests and removal of any exposed personal documents that surface from this incident.

The incident underscores that even sophisticated professional services firms remain vulnerable, and the data they hold about ordinary families can fuel identity crimes for years. Protecting yourself requires more than changing a password. DoxxScan by GalaxyWarden delivers continuous monitoring across 15.4 billion breach records and over 100 platforms, AI-powered identity-chain mapping that connects scattered handles to your real identity, and hands-on remediation specialists who manage takedowns for you and your entire household, including children’s gaming accounts. Acting early limits how far this breach can follow you.