Swartz Campbell Listed by Interlock Ransomware Group

On December 22, 2025, Swartz Campbell LLC, a Pennsylvania-based law firm founded in 1921, appeared on the leak site of the interlock ransomware group. The firm, which maintains multiple offices along the East Coast and handles class-action, employment, medical-malpractice, and divorce cases, is claimed to have had internal files exfiltrated during a ransomware attack. Although the exact number of individuals whose information was taken remains unknown, anyone who has worked with the firm, been represented by it, or had their records stored in its systems could be affected.

What Public Reporting Shows

Public reporting indicates that interlock posted Swartz Campbell to its leak site on December 22, 2025. The data consists of internal files exfiltrated after the group deployed ransomware against the firm’s network. No precise count of exposed records has been released, and the precise systems compromised have not been detailed beyond the broad description of internal documents. The firm’s headquarters are in Philadelphia, with additional locations serving clients across the East Coast.

Why This Matters for You and Your Family

When a law firm loses control of its internal files, the people whose sensitive personal information sits inside those files suddenly face new risks. If you or anyone in your family has used Swartz Campbell for divorce proceedings, employment disputes, medical-malpractice claims, or any class-action matter, documents containing names, addresses, dates of birth, Social Security numbers, medical records, financial details, or case notes may now be in the hands of criminals. That information does not lose its value after the initial breach; it can be sold, traded, or used months or years later to open fraudulent accounts, file fake tax returns, or impersonate you in official correspondence. Your family’s exposure is not limited to the primary client—spouses, children, and other dependents named in case files are equally at risk.

The Doxxing and Identity-Chain Implications

Ransomware groups rarely stop at dumping one set of files. Once internal documents leave a law firm, attackers or buyers can map relationships between names, addresses, phone numbers, email accounts, and online handles. A single leaked divorce filing might list children’s names and school information; an employment case might contain work email addresses that lead to corporate logins. These connections create doxxing chains that turn one breach into repeated targeting. Credential leaks of this kind frequently cascade into account takeovers on email, banking, and especially gaming platforms.

Interlock Ransomware Group’s Track Record

Public reporting attributes the attack to the interlock ransomware group. The group emerged in recent years and has built a reputation for targeting organizations that hold sensitive personal or corporate data. Notable prior victims include other law firms, healthcare providers, and businesses with large customer databases. Their typical playbook involves gaining initial access through phishing or exploited remote-desktop services, exfiltrating documents before encrypting systems, then publishing samples on their leak site to pressure victims into payment. If no payment is received, interlock gradually releases additional batches of data.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, usernames, and real identity so you can see exactly what this claimed breach connects to.
• Rotate any password you used at Swartz Campbell or any related service, then enable two-factor authentication through an authenticator app rather than text messages.
• Enable continuous DoxxScan monitoring across 13.1 billion+ breach records and more than 100 platforms so the next time your information surfaces you learn within hours instead of months.
• Cover the entire household with DoxxScan family protection, which includes dependents and your children’s gaming accounts that often chain back to the same addresses and credentials exposed in incidents like this.
• Let remediation specialists handle takedown requests across data brokers and suspicious sites while you focus on securing your own accounts.

The incident shows that even long-established institutions can lose control of the private information entrusted to them. Taking concrete steps now limits how far criminals can travel down the identity chain created by this leak. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and 100-plus platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that explicitly protects children’s gaming accounts vulnerable to credential-based takeovers. Start your DoxxScan trial today to gain clarity and regain control.