Allen, Dyer, Doppelt, & Gilchrist, P.A. Listed by revil Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

In September 2021, the Orlando-based law firm Allen, Dyer, Doppelt, & Gilchrist, P.A. was listed on a ransomware leak site operated by the group known as revil. Public reporting at the time indicated that the firm had been added to the site on 9 September, with the operators stating they had obtained internal files. No further details on the volume of data, the number of individuals affected, or the precise method of intrusion have been released by the firm or investigators.

What happened

The incident came to light when Allen, Dyer, Doppelt, & Gilchrist, P.A. appeared on revil’s data-leak site. The listing described the event as a ransomware operation in which internal files were taken. The firm has not issued a public statement confirming encryption of its systems or the extent of any operational disruption. The number of people whose information may be involved remains unknown, and no timeline for the initial compromise has been disclosed.

Who is revil?

Revil, also tracked under names such as Sodinokibi, operated as a ransomware-as-a-service group that supplied encryption tools to affiliate attackers in exchange for a share of ransom payments. The group became known for combining file encryption with the exfiltration of data, followed by threats to publish the material on a dedicated leak site if payment was not received. Public records show revil claimed responsibility for intrusions at numerous organizations across multiple sectors before law-enforcement actions in 2021 disrupted its infrastructure.

Allen, Dyer, Doppelt, & Gilchrist, P.A. and its sector

Allen, Dyer, Doppelt, & Gilchrist, P.A. is a Florida law firm focused on intellectual-property matters. Law firms in this practice area routinely maintain records that include client correspondence, patent and trademark filings, litigation materials, and internal strategy documents. Because such information is often subject to attorney-client privilege and confidentiality obligations, any unauthorized access carries implications beyond the firm itself.

What data was at risk

The only detail released is that internal files were claimed to have been removed. The specific categories of documents, the presence or absence of client personally identifiable information, and any financial or technical records have not been confirmed. Organizations of this type commonly store client contact details, case-related communications, and proprietary technical descriptions; however, whether those or other data types were among the exfiltrated material is unconfirmed.

Why it matters

Legal practices hold information that can affect ongoing business operations, intellectual-property rights, and regulatory compliance for their clients. Exposure of such material can create follow-on risks including competitive disadvantage, challenges to confidentiality protections, and the need for clients to reassess their own security postures. For the firm, the incident adds to the administrative burden of incident response, potential regulatory notifications, and reputational considerations within a profession that relies on trust.

If your data was in this claimed breach

Individuals who believe their information may have been held by the firm should monitor their financial and legal accounts for unusual activity and consider placing fraud alerts with credit-reporting agencies. Changing passwords for any accounts linked to the firm and enabling multi-factor authentication where available are standard first steps. Readers may also run a free exposure scan of their email address against known breach data sets to determine whether their information appears in other publicly reported incidents.

AICompiled with AI assistance from public sources and published under our editorial standards.