DUNN, PITTMAN, SKINNER and CUSHMAN, PLLC Listed by 8base Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

DUNN, PITTMAN, SKINNER and CUSHMAN, PLLC, a law firm serving individuals and businesses in eastern North Carolina, was listed by the 8base ransomware group in a report dated April 08, 2024. Public detail indicates that internal files were exfiltrated in a ransomware attack, though the number of people affected remains unknown and further specifics about timing, method, or scale have not been disclosed.

The listing itself is a claim by the group rather than independently confirmed detail. For clients, staff, and others connected to the firm, the incident raises practical questions about what information may have been taken and what steps can reduce risk, even while much remains unconfirmed.

What happened

According to the available record, DUNN, PITTMAN, SKINNER and CUSHMAN, PLLC appeared on a listing associated with the 8base ransomware group on or around April 08, 2024. The reported summary states that internal files were exfiltrated in a ransomware attack. No public figure has been given for the number of people affected, and details such as the precise date of intrusion, how access was obtained, whether systems were encrypted, or the volume of data involved have not been disclosed in the facts at hand.

Ransomware incidents of this type commonly involve both encryption of systems and theft of data for leverage, but those broader patterns cannot be asserted as proven facts for this specific case beyond the statement that internal files were taken. The firm’s own public description notes that its five attorneys and staff provide legal services to individuals and businesses of eastern North Carolina; the listing does not expand on operational impact or any response the firm may have made.

The group behind it: 8base

8base is a ransomware operation that has been publicly documented since roughly mid-2022. The group typically follows a double-extortion model: it encrypts victim systems and simultaneously exfiltrates data, then threatens to publish the stolen material on a dedicated leak site if a ransom is not paid. 8base has been observed targeting a range of organizations, often mid-sized entities across professional services, manufacturing, and other sectors, and it has used established ransomware tooling and affiliate-style recruitment common to ransomware-as-a-service ecosystems.

In this instance, the group’s listing of DUNN, PITTMAN, SKINNER and CUSHMAN, PLLC constitutes a claim that the firm was compromised and that data was taken. No further statements attributed specifically to 8base about this victim—such as sample files, ransom demands, or deadlines—are contained in the provided facts, so none are reported here. Public knowledge of 8base’s general tactics does not substitute for confirmed detail about any single incident.

Who is DUNN, PITTMAN, SKINNER and CUSHMAN, PLLC?

DUNN, PITTMAN, SKINNER and CUSHMAN, PLLC is a law firm based in eastern North Carolina. Its public description states that five attorneys and the entire staff work to provide quality legal services to individuals and businesses in that region. Firms of this kind routinely handle civil and commercial matters, personal legal affairs, and related documentation for local clients.

Law practices necessarily collect and retain sensitive material: client identities, contact details, financial records, case files, correspondence, and sometimes medical or employment information depending on the practice areas involved. A ransomware incident that includes data exfiltration therefore carries heightened consequence because the firm sits at the intersection of professional confidentiality obligations and the personal privacy of the people it serves. The breach does not, by itself, establish negligence or any particular security shortcoming; it simply places the firm among organizations whose internal files have been claimed by a known ransomware actor.

The information in question

The facts name the exposed material only as “internal files exfiltrated in ransomware attack.” No inventory of specific data types—such as client names, Social Security numbers, financial account details, medical records, or privileged communications—has been publicly itemized in the available record. The exact contents therefore remain unconfirmed.

Organizations of this kind typically hold client intake forms, contracts, billing records, email archives, personnel files, and case-related documents. Any or all of those categories could theoretically be present among internal files, yet it would be inaccurate to state that any particular category was taken. Until more precise disclosure appears, the prudent stance is to treat the possibility of sensitive personal and professional data exposure as real while recognizing that the precise scope is unknown.

What's at stake

For individuals whose information may have been among the exfiltrated files, the concrete risks include identity theft, targeted phishing or social-engineering attempts that reference genuine case details, and potential misuse of financial or personal identifiers. Even incomplete or older records can be combined with other data sources to create convincing fraud. Clients may also face secondary concerns about the confidentiality of legal matters they entrusted to the firm.

For the firm itself, the stakes include operational disruption if systems were encrypted, reputational harm, possible regulatory or professional-ethics inquiries, and the cost of investigation, notification, and remediation. Because the number of people affected is listed as unknown, the full scale of notification and support obligations cannot yet be measured. None of these outcomes is guaranteed; they represent the ordinary range of consequences that follow ransomware claims involving professional-service data.

What to do if you're exposed

If you are a current or former client, employee, or other party connected to DUNN, PITTMAN, SKINNER and CUSHMAN, PLLC, begin by monitoring financial accounts and credit reports for unfamiliar activity. Consider placing a fraud alert or credit freeze with the major credit bureaus. Be alert to unsolicited communications that reference legal matters or personal details; verify any such contact through known, independent channels rather than replying directly. If the firm issues official guidance or offers credit-monitoring services, follow those instructions promptly.

You can also run a free exposure scan of your email address to check whether it has already appeared in known breach data sets. That step does not confirm or rule out involvement in this specific incident, but it provides a practical baseline for further vigilance while public detail remains limited.

AICompiled with AI assistance from public sources and published under our editorial standards.