A ransomware group claims it stole about 19GB of data from Bankruptcy Software Specialists, LLC, a Tennessee company that makes debt management software for bankruptcy trustees. The group says the data includes employee and client personal information, financial details, contracts, and payment records. Bankruptcy Software Specialists has not confirmed this breach. Affected individuals should monitor credit reports and watch for phishing attempts.
| Company | Bankruptcy Software Specialists, LLC |
|---|---|
| Industry | Other Commercial |
| Data Types Exposed | Employee Personal Information, Client Personal Information, Financial Information, Contracts and Agreements, Payment Details |
| People Affected | Not Publicly Disclosed |
| Attack Method | Ransomware |
| Regulators Notified | Not Publicly Disclosed |
Were you affected by this breach?
You may be owed compensation.
Data breach victims can recover money for identity-theft losses, out-of-pocket costs, wasted time, and the ongoing risk of fraud — usually with no upfront cost, and no fee unless you win.
Check if you qualify — free reviewWhat Happened in the Bankruptcy Software Specialists Data Breach?
A ransomware group has claimed responsibility for a cyberattack on Bankruptcy Software Specialists, LLC, also known as BSS. The company builds software used by Chapter 13 Bankruptcy Trustees to track trust funds and manage debt cases. BSS is based in Tennessee and serves trustees across the country.
According to the group’s claim, attackers accessed roughly 19 gigabytes of corporate data. The group says this data includes employee and client information, financial details, contracts, agreements, and payment records. As of now, the exact timeline of the intrusion has not been publicly disclosed.
It is important to note that this report stems from a claim posted by the ransomware group itself, not from a statement by BSS. Because of this, the breach has not been independently confirmed. The company has not publicly confirmed the incident, and no forensic findings have been released yet.
In many cases like this, the attacking group posts data samples or a countdown before releasing the rest. Whether that has happened here, or whether BSS has engaged a forensic firm to investigate, has not been publicly disclosed. As a result, readers should treat the scope and details of this incident as unconfirmed for now.
Who was affected?
The ransomware group’s claim suggests that both employees and clients of BSS could be affected. Because BSS provides software to Chapter 13 Bankruptcy Trustees, its client base likely includes trustee offices and possibly their staff members. However, the precise list of affected parties has not been publicly disclosed.
The exact number of individuals or organizations affected has also not been publicly disclosed. Given that BSS is described as a leading provider of debt management software, the ripple effects could extend beyond BSS employees. For example, trustee offices that rely on BSS systems may have their own client data intertwined with BSS’s records.
Since the incident is still unconfirmed by the company, the geographic scope of affected individuals is unclear. It is possible this reaches beyond Tennessee, given that bankruptcy trustees operate nationwide. Until BSS or investigators release more details, affected individuals may not know their information was involved.
What Information Was Potentially Exposed?
The ransomware group claims that several categories of sensitive data were part of the stolen files. Because this claim has not been verified by BSS, these categories should be viewed as reported rather than confirmed. Based on the group’s own description, the following data types were allegedly included.
- Employee personal information
- Client personal information
- Financial information
- Contracts and agreements
- Payment details
If these claims are accurate, the risk to affected individuals could be significant. Financial information combined with personal details often gives criminals what they need to attempt identity theft. In addition, payment information could be used for unauthorized transactions if it includes account or card details.
Beyond financial fraud, exposed contracts and agreements could reveal business relationships or sensitive terms. This might create risk for the organizations named in those documents, not just individuals. Because bankruptcy trustee work often touches confidential financial matters, any exposure in this sector deserves careful attention.
What is the company doing?
Because this incident stems from a ransomware group’s claim, there is no public statement yet describing a company response. BSS has not publicly confirmed the incident, so no notification timeline or remediation steps have been disclosed. As a result, it is not yet known whether BSS has retained a cybersecurity firm or notified affected individuals.
It also remains unclear whether BSS plans to offer credit monitoring or identity protection services. Companies facing similar claims often issue public statements once their internal investigation concludes. Until BSS does so, affected individuals should rely on their own protective measures rather than wait for official confirmation.
What Should Affected Individuals Do?
Monitor Your Credit Reports
Affected individuals should check their credit reports regularly for unfamiliar accounts or inquiries. You can request free reports from all three major credit bureaus through AnnualCreditReport.com. Doing this consistently helps you catch fraudulent activity early.
Because this breach claim involves financial information, this step matters even more. If you notice any unexpected accounts or hard inquiries, report them to the credit bureau immediately. Early detection often limits the damage a fraudster can cause.
Consider a Fraud Alert or Credit Freeze
Given the claimed exposure of financial and payment details, placing a fraud alert on your credit file is a smart precaution. A fraud alert requires lenders to verify your identity before issuing new credit. This extra step can stop identity thieves from opening accounts in your name.
For stronger protection, you might consider a credit freeze instead. A freeze restricts access to your credit file entirely until you lift it. While slightly less convenient, it offers more robust protection against new-account fraud.
Watch for Phishing and Social Engineering Attempts
Criminals who obtain personal information often use it to craft convincing phishing emails or phone calls. Be cautious of messages that reference your name, employer, or financial details in an attempt to appear legitimate. Never click links or share information unless you can verify the sender’s identity independently.
In addition, watch for unexpected calls claiming to be from your bank or a government agency. Legitimate organizations rarely ask for sensitive information over the phone without prior arrangement. If you are unsure, hang up and call the organization directly using a verified number.
Keep Records and Consult a Data Breach Attorney
If you later receive a notification letter from BSS or learn you were affected, keep that letter and any related correspondence. This documentation could matter if you decide to pursue compensation. It also helps establish a timeline for when you learned about the exposure.
Because this incident involves a ransomware group’s claim rather than a confirmed company statement, it may still develop further. Consulting a data breach attorney can help you understand your options if your information is confirmed to be involved. Many attorneys offer free consultations to evaluate potential claims.
Get a Free Case Review
Tell us how this breach affected you. A data breach attorney will review your situation at no cost and with no obligation — it takes about two minutes.