A ransomware group known as Rhysida claims to have stolen criminal defense case files from Law Offices of R. David Williams, P.A., including police bodycam footage, victim and witness data, and fingerprint records. The firm has not publicly confirmed the incident. Affected individuals should monitor credit reports, watch for phishing, and consider consulting a data breach attorney.
| Company | Law Offices of R. David Williams, P.A. |
|---|---|
| Industry | Other Commercial |
| Data Types Exposed | Criminal Case Records, Police Bodycam Footage, 911 and Jail Call Recordings, Fingerprint Cards, Victim and Witness Information, Risk Protection Order Records, Expungement Case Files, Attorney Billing Information |
| People Affected | Not Publicly Disclosed |
| Attack Method | Ransomware |
| Regulators Notified | Vermont Attorney General |
Were you affected by this breach?
You may be owed compensation.
Data breach victims can recover money for identity-theft losses, out-of-pocket costs, wasted time, and the ongoing risk of fraud — usually with no upfront cost, and no fee unless you win.
Check if you qualify — free reviewWhat Happened in the Law Offices of R. David Williams Data Breach?
A ransomware group known as Rhysida has claimed responsibility for a data breach involving Law Offices of R. David Williams, P.A., a Florida criminal defense firm. According to the claim, the attackers accessed a large collection of case files tied to the firm’s criminal defense practice. This reported data breach reportedly touches more than 175 client matters.
The claimed dataset reportedly includes felony case records, DUI matters, probation violation files, and expungement packets. It also allegedly contains sensitive law enforcement materials such as bodycam footage, 911 recordings, and jail call recordings. The exact timeline of the intrusion has not been publicly disclosed, and the breach notification date is listed as September 2026.
Because this incident was reported through a ransomware group’s leak-site listing, it reflects the attacker’s own claims. Law Offices of R. David Williams, P.A. has not publicly confirmed the incident as of this writing. As a result, details about how the intrusion occurred, when it was discovered, or what forensic steps have been taken remain unclear. Readers should treat unconfirmed specifics with appropriate caution while the situation develops.
Who was affected?
The individuals potentially affected by this data breach include current and former clients of the firm’s criminal defense practice. Based on the claimed dossier, this includes people facing felony charges, DUI defendants, and individuals under probation supervision. In addition, the exposed files reportedly include material tied to victims and witnesses connected to these cases.
The claimed data set allegedly includes at least two individuals in ICE custody and a material witness under long-term GPS monitoring. This suggests the affected population may include especially vulnerable people. The exact number of individuals affected has not been publicly disclosed, so the full scope remains uncertain.
What Information Was Potentially Exposed?
According to the claimed leak, the exposed data spans a wide range of sensitive legal and personal records. Because these are criminal case files, the potential harm extends beyond typical financial exposure. Below is a summary of the categories reportedly included in the claimed dataset.
- Criminal case details, including felony, DUI, and probation violation records
- Police discovery materials, including bodycam video and incident reports
- 911 call recordings and jail call recordings
- Photo line-ups and fingerprint cards (FD-258)
- FCIC/NCIC law enforcement database forms
- Victim and witness identifying information (Marsy’s Law protected data)
- Risk Protection Order and expungement case records
- Attorney fee and billing information
This type of exposure carries risks that go beyond standard identity theft concerns. For example, victims and witnesses named in these files could face retaliation or intimidation if their identities become public. Similarly, individuals with pending expungement cases may find their prior criminal history resurfacing in ways that undermine their legal relief.
In addition, exposed fingerprint cards and law enforcement database records could be misused for identity fraud or to impersonate someone in official records. Because some affected individuals are reportedly under active monitoring, such as GPS supervision or ICE custody, any leak of their location or case status could create serious safety concerns. This makes the stakes of this breach unusually high compared to many consumer data incidents.
What is the company doing?
Because this incident stems from a ransomware group’s claim, there is no confirmed public statement from Law Offices of R. David Williams, P.A. describing an investigation or remediation steps. Therefore, this article cannot state that the firm has taken specific containment or notification actions beyond what is independently confirmed.
However, the firm has filed formal breach notifications with the Vermont Attorney General on multiple occasions, including filings dated April 2, 2026, April 22, 2026, and July 9, 2026. One of these filings is documented at the Vermont Attorney General breach notice page. These filings indicate that some level of formal disclosure has occurred, even though the ransomware claim itself remains unconfirmed by the firm.
What Should Affected Individuals Do?
Monitor Your Credit Reports
Affected individuals should request copies of their credit reports from all three major bureaus. This helps identify unfamiliar accounts or inquiries early. Because criminal case data does not always include financial account numbers, credit monitoring is still a wise precaution given the range of personal details reportedly involved.
You can access free credit reports through AnnualCreditReport.com. Reviewing these reports regularly, rather than just once, makes it easier to spot fraud before it grows. If you notice suspicious activity, report it to the credit bureau immediately.
Consider a Fraud Alert or Credit Freeze
Given the sensitive nature of the reportedly exposed records, placing a fraud alert or credit freeze can add a layer of protection. A fraud alert requires lenders to verify your identity before opening new credit. A credit freeze goes further by blocking access to your credit file entirely.
To set up either option, contact Equifax, Experian, or TransUnion directly. This step is especially important if you believe your fingerprint data or other identifying records may have been included in the claimed leak. Because these records may be harder to change than a password, added vigilance is warranted.
Stay Alert for Phishing and Impersonation Attempts
Scammers often use breach news to craft convincing phishing messages. As a result, affected individuals should be cautious of unexpected calls, texts, or emails referencing their legal case. Never click on links or provide personal information without verifying the sender first.
If you receive a message claiming to be from a court, law enforcement agency, or the firm itself, contact the organization directly using a verified phone number. This helps confirm whether the message is legitimate. Because some exposed individuals may be involved in active legal proceedings, scammers could attempt to exploit that fear.
Protect Victim and Witness Safety
Individuals identified as victims or witnesses in the claimed dataset should take extra precautions regarding personal safety. This may include reviewing home security measures and being cautious about sharing location information publicly. Because Marsy’s Law protections exist to shield victim identities, any exposure of this data is particularly concerning.
If you believe you were named as a victim or witness in a case handled by this firm, consider speaking with a victim advocate or legal professional. They can help you understand your rights and any additional protective steps available. In addition, consulting a data breach attorney may help clarify whether you qualify for legal remedies.
Consult a Data Breach Attorney
Because this incident involves highly sensitive legal and personal records, affected individuals may want to speak with an attorney who focuses on data breach cases. An attorney can help determine whether you have grounds for a claim based on the specific data exposed in your case file.
Many data breach attorneys offer free initial consultations. This makes it easier to understand your options without financial risk upfront. Given the sensitivity of criminal case records, legal guidance can help you navigate both privacy and safety concerns together.
Get a Free Case Review
Tell us how this breach affected you. A data breach attorney will review your situation at no cost and with no obligation — it takes about two minutes.
More Information
View the public data breach notification listing from Vermont Attorney General