2026 Fox Rothschild — Silent Ransom Group breach & leak; SSNs and confidential client matter files

Verified breach — May–June 2026. On May 21, 2026 the Silent Ransom Group (SRG, also tracked as Luna Moth) accessed Fox Rothschild LLP's environment, exfiltrated data, and demanded payment with a May 28, 2026 deadline. Negotiations failed; SRG published the stolen archive after the deadline. Fox Rothschild publicly confirmed the breach following a June 9, 2026 class-action filing (Trotter v. Fox Rothschild, E.D. Pa. Case 2:26-cv-03931) alleging failure to safeguard names and Social Security numbers. Chief AI & information security officer Mark McCreary stated one attorney fell victim to a sophisticated social engineering event on May 21 limited to a single device with no broader network access and that activity was quickly contained—SRG disputed that characterization, telling DataBreaches.net it copied data via cloud bypass and gained broader infrastructure access. DataBreaches.net reported June 29, 2026 that leaked files include folders marked Confidential and Privileged, active mediation/settlement matter summaries, and dozens of class-action spreadsheets with plain-text member PII including SSNs; SRG claimed roughly 100,000 SSNs while Fox Rothschild's negotiator cited extensive duplicates. The FBI has warned law firms about SRG's social-engineering playbook since 2025. BreachHistory indexes recordsAffected 0 pending firm attestation of unique individuals notified.