ADM LAW Listed by SilentRansomGroup Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

Ahmuty, Demers & McManus, known as ADM LAW, a New York-based law firm, was listed by the SilentRansomGroup ransomware group as of a report dated March 20, 2025. Public details indicate that internal files were exfiltrated in a ransomware attack, though the number of people affected remains unknown and further specifics have not been disclosed. For a firm handling legal matters, any such claim of data theft raises practical concerns for clients, employees, and partners whose information may have been involved, even while confirmation of the full scope stays limited.

The listing itself is a claim by the group rather than an independently verified disclosure from the firm. What is known so far centers on the reported exfiltration of internal files; timing of the intrusion, exact scale, and method of access have not been made public.

What happened

According to the available record, ADM LAW appeared on a SilentRansomGroup leak-site listing reported on March 20, 2025. The group asserts that internal files were taken during a ransomware attack. No public figure has been given for the volume of data, the number of individuals potentially affected, or the precise window in which the incident occurred. Technical details of how access was obtained—whether through phishing, compromised credentials, or another vector—are undisclosed. In ransomware cases of this type, operators typically encrypt systems and threaten to publish stolen material unless a payment is made; here, only the claim of exfiltration of internal files has been stated. The firm has not, in the provided facts, issued a detailed public confirmation of the listing’s accuracy or scope.

The group behind it: SilentRansomGroup

SilentRansomGroup is a ransomware operation that has been documented in public cybersecurity reporting for double-extortion tactics: encrypting victim systems while also stealing data and threatening to leak it. The group has been associated with targeting professional-services organizations, including law firms, often relying on social-engineering approaches such as callback phishing or impersonation of IT support to gain initial access. Once inside a network, operators typically move laterally, identify valuable file shares, and exfiltrate material before deploying ransomware. Public accounts of the group’s activity describe pressure campaigns that include timed leak-site postings and, in some cases, direct outreach to clients or media. These patterns are drawn from broader, well-established observations of the actor; they do not constitute verified statements about the ADM LAW incident beyond the group’s own claim that the firm was listed and that internal files were taken. Attribution of any specific breach rests on the group’s assertion unless independently confirmed.

About ADM LAW

Ahmuty, Demers & McManus (ADM LAW) was founded in 1983 and is headquartered in New York, New York. It operates as a full-service law firm. Firms of this kind routinely manage sensitive client matters, litigation files, contracts, personnel records, and correspondence that can contain personal identifiers, financial details, and privileged communications. Because legal practices sit at the intersection of confidential client interests and regulatory obligations, any reported compromise of internal systems carries heightened consequences: loss of privilege, potential regulatory scrutiny, and erosion of client trust. The firm’s long presence in the New York legal market means it has accumulated decades of case-related and administrative data whose exposure, if confirmed, would affect both current and former clients as well as staff.

What was likely exposed

The facts state only that internal files were exfiltrated in a ransomware attack. No inventory of specific document types, databases, or personal-data categories has been released, and the number of people affected is listed as unknown. Law firms of ADM LAW’s profile typically hold client intake forms, case files, discovery materials, billing records, employee personnel files, and email archives. These materials can include names, addresses, Social Security numbers, financial account information, medical or employment details relevant to litigation, and privileged attorney-client communications. Because the exact contents remain unconfirmed, it is not possible to state with certainty which of these categories, if any, were among the taken files. Readers should treat any assumption about particular data elements as speculative until further disclosure occurs.

What's at stake

For individuals whose information may have been among the internal files, the concrete risks include identity theft, targeted phishing that references real legal matters, and unauthorized use of personal or financial details. Privileged communications, if exposed, can undermine ongoing cases or settlement negotiations. For the firm itself, the stakes involve potential regulatory notification duties under state and federal privacy rules, possible civil claims from affected parties, reputational harm that can affect client retention, and the operational cost of incident response, forensic investigation, and system restoration. Even when the precise data set is unknown, the combination of a ransomware claim and a law-firm environment means both personal and professional confidentiality are at issue. No public evidence in the given facts establishes negligence on the part of the firm; the focus remains on the reported claim and its possible consequences.

If your data was in this claimed breach

If you have been a client, employee, or vendor of ADM LAW, treat the possibility of exposure seriously even while details stay limited. Monitor financial accounts and credit reports for unusual activity, place fraud alerts if warranted, and be alert to unexpected emails or calls that reference legal matters or request sensitive information. Change passwords on any accounts that may have reused credentials associated with the firm, and enable multi-factor authentication wherever available. Preserve any notices you receive from the firm itself. As a practical next step, you can run a free exposure scan of your email address to check whether your information has already appeared in known breach data sets; such scans provide an early indicator but do not replace official notifications. Stay informed through verified statements from the firm or relevant authorities rather than unverified third-party claims.

AICompiled with AI assistance from public sources and published under our editorial standards.