May–June 2026: Top-100 U.S. law firm Fox Rothschild confirmed a Silent Ransom Group (SRG) data breach after the extortion gang leaked confidential client matter files—including class-member Social Security numbers—when pay-or-leak negotiations collapsed on May 28, 2026.
What happened
On May 21, 2026, SRG accessed Fox Rothschild's environment via social engineering, exfiltrated data, and opened ransom talks with a May 28 deadline. When no agreement was reached, SRG published the archive. Fox Rothschild publicly confirmed the incident after plaintiff Jasmine Trotter filed a class-action suit in the Eastern District of Pennsylvania (Trotter v. Fox Rothschild, Case 2:26-cv-03931) on June 9, 2026, alleging the firm failed to protect names and SSNs.
Per Reuters, Fox Rothschild CISO Mark McCreary said one attorney was the victim of a sophisticated social-engineering event limited to a single device, quickly contained. SRG disputed that scope in reporting to DataBreaches.net, claiming broader infrastructure access.
What data was exposed
DataBreaches.net's June 29 investigation found leaked folders marked Confidential and Privileged, including active mediation and settlement summaries for corporate litigation, plus dozens of class-action spreadsheets with member names, addresses, phone numbers, and plain-text SSNs. SRG claimed roughly 100,000 SSNs; Fox Rothschild's negotiator argued the figure contained extensive duplicates.
Silent Ransom Group's law-firm campaign
SRG (Luna Moth) has targeted dozens of law firms since 2023. The FBI issued private industry notifications in 2025 and again in May 2026 warning of IT-personnel impersonation via social engineering. Unlike encryption-heavy ransomware, SRG exfiltrates limited data, demands high ransoms, and leaks promptly when deadlines pass.
Action items for affected parties
- Wait for official notice from Fox Rothschild—not dark-web downloads.
- Freeze credit if you were a class member in matters handled by the firm.
- Verify wire instructions for any active litigation settlements by phone through known counsel.
- Report phishing citing real case details to the firm and FBI IC3.
Canonical record: Fox Rothschild Silent Ransom 2026 on BreachHistory.