A ransomware group claims it stole over 167,000 files from law firm Gress Clark Young & Schoepper, allegedly including client Social Security numbers, medical records, and firm financial data. The firm has not confirmed this incident. If you’ve worked with this firm, monitor your credit reports and consider a credit freeze as a precaution.
| Company | Gress Clark Young & Schoepper |
|---|---|
| Industry | Other Commercial |
| Data Types Exposed | Social Security Numbers, Banking Details, Medical Records and Imaging, Tax and Employment Forms, Driver’s License Copies, Firm Financial Records, Court E-Filing Credentials |
| People Affected | Not Publicly Disclosed |
| Attack Method | Ransomware |
| Regulators Notified | Not Publicly Disclosed |
Were you affected by this breach?
You may be owed compensation.
Data breach victims can recover money for identity-theft losses, out-of-pocket costs, wasted time, and the ongoing risk of fraud — usually with no upfront cost, and no fee unless you win.
Check if you qualify — free reviewA ransomware group has claimed responsibility for stealing a large volume of files from the law firm Gress Clark Young & Schoepper. The alleged data includes client Social Security numbers, medical records, and internal firm financial information. The firm has not publicly confirmed this incident.
What Happened in the Gress Clark Young & Schoepper Data Breach?
According to claims posted by a ransomware group, attackers obtained roughly 167,804 files totaling about 166.4 gigabytes from the firm’s systems. The group says this cache includes sensitive client records, court filings, and internal business documents. However, Gress Clark Young & Schoepper has not issued any public statement confirming or denying these claims.
The exact timeline of the alleged intrusion has not been publicly disclosed. As a result, it remains unclear when unauthorized access to the firm’s network may have first occurred or how long the attackers may have had access before the claim surfaced. The breach discovery date has not been publicly disclosed either.
Because this incident is currently known only through a threat actor’s leak-site posting, there is no confirmed forensic investigation to report. In addition, no law enforcement notification or third-party cybersecurity review has been mentioned anywhere in connection with this claim. Readers should treat the details below as allegations until the firm says otherwise.
Who was affected?
Based on the claimed data categories, the people potentially affected include current and former clients of the firm, as well as witnesses, medical experts, and possibly employees. Given the firm’s apparent work with the Board of Industrial Insurance Appeals, many affected individuals may be workers’ compensation claimants or parties to insurance appeal cases.
The total number of individuals affected has not been publicly disclosed. Because law firms often retain records for years, the population at risk could include people whose cases closed long ago. In addition, the claimed exposure of W-9, I-9, and W-4 forms suggests current or former firm employees and contractors may also be affected.
What Information Was Potentially Exposed?
The ransomware group’s posting describes a wide range of sensitive data categories. If accurate, this would represent a serious exposure spanning both client and firm records. The following categories were named in the group’s claim.
- Social Security numbers and signatures of clients and witnesses
- W-9, I-9, and W-4 tax and employment forms, including driver’s license and Social Security card copies
- Banking details belonging to the firm and its clients
- Medical photos, imaging, and complete medical records, including X-rays and Activity Prescription Forms
- Board of Industrial Insurance Appeals case files, including default orders and internal case notes
- Firm financial records, including QuickBooks files, voided checks with signatures, and expert payment records
- Credentials for a court e-filing system
- Internal correspondence to physicians regarding expert medical opinions
If these claims are accurate, the risk to affected individuals could be substantial. Social Security numbers combined with signatures and government ID copies give criminals nearly everything needed to open new credit accounts, file fraudulent tax returns, or commit full identity theft. Banking details could also enable direct account takeover attempts.
The alleged exposure of medical records adds another layer of risk. Criminals sometimes use stolen health information for medical identity theft, insurance fraud, or targeted scams that reference a person’s actual diagnoses or treatments. Because this data reportedly involves workers’ compensation and injury cases, affected individuals may also face privacy concerns around sensitive personal injury details becoming public.
What is the company doing?
At this time, Gress Clark Young & Schoepper has not publicly confirmed the ransomware group’s claims. Therefore, no official investigation, containment measures, or notification process has been described by the firm itself. Any response efforts remain unknown to the public.
Because this remains an unconfirmed claim, it is not yet known whether the firm plans to offer credit monitoring, identity protection services, or formal breach notifications to affected individuals. Readers should watch for official communication directly from the firm or from state regulators in the coming weeks. If notifications are issued, they would typically explain what data was involved and what protective steps are being offered.
What Should Affected Individuals Do?
Monitor Your Credit Reports
Anyone who has worked with this firm as a client, witness, or employee should begin reviewing their credit reports closely. You can request free reports from all three major credit bureaus and check for unfamiliar accounts or inquiries.
This step matters because Social Security numbers paired with signatures and ID copies create a strong foundation for identity theft. As a result, early detection through regular credit report reviews can help limit financial damage before it spreads.
Consider a Fraud Alert or Credit Freeze
Given the claimed exposure of Social Security numbers and banking details, placing a fraud alert or a full credit freeze with Equifax, Experian, and TransUnion is a reasonable precaution. A freeze blocks new creditors from accessing your file, which makes it much harder for criminals to open accounts in your name.
While a freeze can be mildly inconvenient if you need new credit soon, it remains one of the strongest free tools available. In addition, a fraud alert requires lenders to verify your identity before approving new credit, which adds another layer of protection at no cost.
Protect Against Medical Identity Theft
Because medical records and imaging were reportedly included in this incident, affected individuals should also review their health insurance statements closely. Look for claims or services you don’t recognize, since these can signal medical identity theft.
If you spot anything suspicious, contact your health insurer immediately and request a copy of your benefits usage history. This allows you to catch fraudulent claims early, before they affect your coverage or create inaccurate entries in your medical record.
Stay Alert for Phishing and Scam Attempts
Criminals often use stolen personal and medical details to craft convincing phishing emails or phone calls. Therefore, be cautious of any message referencing your legal case, medical treatment, or financial accounts, especially if it asks you to click a link or share information.
Instead of responding directly, verify the sender through an official phone number or website you find independently. This simple habit can prevent you from accidentally handing over additional information to scammers posing as trusted organizations.
Consult a Data Breach Attorney
Because this incident reportedly involves highly sensitive legal and medical records, affected individuals may want to speak with an attorney who focuses on data breach cases. An attorney can help you understand your rights and whether you qualify for compensation.
Many data breach attorneys offer free initial consultations. This means you can learn about your options at no cost before deciding whether to pursue any legal action related to this claimed exposure.
Get a Free Case Review
Tell us how this breach affected you. A data breach attorney will review your situation at no cost and with no obligation — it takes about two minutes.