A ransomware group known as insomnia claims to have breached Wiggins, Childs, Pantazis, Fisher, & Goldfarb LLC, a plaintiffs law firm with offices in Alabama, D.C., and Florida, potentially exposing client, employee, and case-related personal data. The number of people affected has not been publicly disclosed. Affected individuals should monitor credit reports and consider a credit freeze immediately.
| Company | Wiggins, Childs, Pantazis, Fisher, & Goldfarb LLC |
|---|---|
| Industry | Other Commercial |
| Data Types Exposed | Full Names and Contact Information, Social Security Numbers, Employment Records, Case Files and Litigation Documents, Financial Account Information, Medical or Health-Related Details, Internal Employee Records |
| People Affected | Not Publicly Disclosed |
| Attack Method | Ransomware |
| Regulators Notified | Not Publicly Disclosed |
Were you affected by this breach?
You may be owed compensation.
Data breach victims can recover money for identity-theft losses, out-of-pocket costs, wasted time, and the ongoing risk of fraud — usually with no upfront cost, and no fee unless you win.
Check if you qualify — free reviewWhat Happened in the Wiggins Childs Data Breach?
A ransomware group calling itself insomnia has claimed responsibility for breaching Wiggins, Childs, Pantazis, Fisher, & Goldfarb LLC, a plaintiffs-side law firm with offices in Alabama, Washington D.C., and Florida. The firm has built its reputation since 1985 handling discrimination, consumer protection, and employment class actions. As a result, its files likely contain highly sensitive information tied to current and former clients, employees, and case participants.
The exact discovery date of the intrusion has not been publicly disclosed. However, the threat actor group insomnia has publicly asserted that it accessed the firm’s systems and obtained internal data. Because the firm regularly handles confidential case files, employment records, and personal details from plaintiffs in sensitive litigation, any unauthorized access raises significant concern.
At this time, the firm’s notification timeline has also not been made public. In response to claims like this, law firms typically launch an internal investigation and bring in outside forensic specialists to determine what systems were accessed. This process usually involves reviewing network logs, identifying the entry point, and confirming which files or databases were touched.
Until a full forensic report is released, the precise scope of the intrusion remains unclear. Nevertheless, ransomware groups that claim credit for an attack typically do so because they have exfiltrated data they intend to leverage for extortion. This pattern suggests real data may have left the firm’s network before any public disclosure occurred.
Who was affected?
The population affected by this incident has not been publicly disclosed. Given the nature of the firm’s work, however, those impacted could include current and former clients, plaintiffs involved in class action litigation, employees, and possibly opposing parties whose information appeared in case files. Law firms often retain records for years after a case closes, so the affected group could span a wide range of time periods.
Because the firm operates across Alabama, the District of Columbia, and Florida, the geographic reach of any exposure could extend well beyond a single state. In addition, class action plaintiffs represented by the firm may include vulnerable individuals, such as those involved in discrimination or consumer protection disputes. It is also possible that minors were named in certain employment or consumer cases, though this has not been confirmed.
What Information Was Potentially Exposed?
The specific data categories confirmed as exposed in this incident have not been fully detailed in public reporting. However, based on the nature of a plaintiffs’ law firm’s operations, the types of information typically stored in such systems can include highly sensitive personal and case-related details.
- Full names and contact information
- Social Security numbers
- Employment records
- Case files and litigation documents
- Financial account information
- Medical or health-related details tied to legal claims
- Internal employee records
If any of this information was indeed accessed, the risk to affected individuals could be considerable. For example, Social Security numbers combined with names and addresses give criminals nearly everything needed to open fraudulent credit accounts. Because litigation files often include sensitive personal history, exposure could also lead to targeted phishing or social engineering attempts against former clients.
Furthermore, medical and employment details tied to legal claims could be misused for extortion or embarrassment, particularly in discrimination or workplace dispute cases. As a result, affected individuals should treat any notification from the firm seriously and act quickly to limit potential harm. Even partial exposure of case-related personal data can create lasting risk if it circulates on criminal marketplaces.
What is the company doing?
In response to the claimed attack, the firm is expected to have engaged cybersecurity professionals to assess the intrusion and secure its network. Typical steps in this situation include isolating affected systems, resetting credentials, and reviewing which files were accessed or removed.
Because no notification date has been publicly confirmed, it remains unclear whether formal letters have gone out to affected individuals. Firms handling sensitive litigation data generally work with legal and forensic teams before issuing notifications, so that accurate information reaches those impacted. Anyone concerned about their data should watch for official correspondence directly from the firm in the coming weeks.
What Should Affected Individuals Do?
Monitor Your Credit Reports
Affected individuals should request a free copy of their credit report from each of the three major credit bureaus. Reviewing these reports carefully can reveal new accounts, inquiries, or addresses that do not belong to you.
Because fraudulent activity can take months to surface, it helps to check your reports periodically rather than just once. If you spot anything unfamiliar, dispute it immediately with the bureau and document everything for your records.
Consider a Credit Freeze or Fraud Alert
Given that Social Security numbers may have been involved, placing a credit freeze with each bureau is a strong protective step. A freeze blocks new creditors from accessing your file, which makes it much harder for identity thieves to open accounts in your name.
Alternatively, a fraud alert requires lenders to take extra verification steps before approving credit. This option is faster to set up and still provides meaningful protection, though a freeze offers stronger security overall.
Stay Alert to Phishing Attempts
Because breached data often ends up in the hands of scammers, affected individuals should watch for suspicious emails, texts, or phone calls referencing the firm or their legal case. Never click links or share personal details in response to unsolicited messages.
Instead, verify any communication by contacting the firm directly through a known phone number or website. This simple habit can prevent scammers from tricking you into revealing additional sensitive information.
Safeguard Sensitive Legal and Medical Details
If your case involved medical records or health-related claims, be aware that this information could be misused for medical identity theft or targeted scams. Review any insurance statements or medical bills for services you do not recognize.
In addition, keep a record of any unusual communications referencing your case details. This documentation could prove valuable if you later need to report fraud or consult an attorney about your options.
Seek Professional Guidance
Given the sensitivity of the data potentially involved, affected individuals may want to speak with a data breach attorney about their rights. An attorney can help determine whether you qualify for compensation and explain any relevant deadlines.
Because class action eligibility and statutes of limitations vary by state, professional guidance can clarify your options quickly. Many attorneys offer free consultations, so there is little downside to asking questions early.
Get a Free Case Review
Tell us how this breach affected you. A data breach attorney will review your situation at no cost and with no obligation — it takes about two minutes.