Epperson Law Group Listed by interlock Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

When a law firm appears on a ransomware group's leak site, the practical stakes fall first on the people whose private matters may have been caught in the middle. Clients entrust firms like Epperson Law Group with sensitive personal, financial and legal details; any unauthorized access can leave those individuals facing identity risks, unwanted exposure of private disputes, or long-term uncertainty about what outsiders now hold. Public reporting so far leaves the full scope unclear, yet the mere listing is enough to warrant careful attention from anyone who has done business with the firm.

According to available records, Epperson Law Group was listed by the ransomware group known as interlock on or around 12 August 2025. The group claims that internal files were exfiltrated during a ransomware attack and that many people's data was compromised. Exact numbers of affected individuals remain unknown, and independent confirmation of the full extent of the incident has not been made public.

Inside the incident

Public detail on the incident itself is limited. The available record states that Epperson Law Group was listed by interlock and that the group asserts internal files were taken in a ransomware attack. The group's own description claims that "many people's data was compromised, and the work in the system was completely broken." No verified figures for the volume of data, the precise date the intrusion began, the initial access method, or the number of people affected have been disclosed in the facts provided. Timing beyond the 12 August 2025 reporting date, technical indicators of compromise, and any ransom demand details are likewise unconfirmed. The listing itself constitutes a claim by the threat actor rather than an independently verified statement of fact.

Inside interlock

Interlock is a ransomware operation that has appeared in public threat reporting as a group employing double-extortion tactics: encrypting systems while also claiming to steal data and threatening to publish it if payment is not made. Like other contemporary ransomware crews, interlock typically posts victim names on a dedicated leak site to increase pressure. Public analyses of the group describe the use of common initial-access techniques seen across the ransomware ecosystem, followed by data exfiltration and encryption. The group has been linked in open-source reporting to attacks on organizations across multiple sectors, though each listing must be treated as an unverified claim until corroborated. In this case, interlock's listing of Epperson Law Group is presented solely as the group's assertion; no additional statements attributed specifically to this victim beyond the general claims of file theft and disruption appear in the available facts.

Who is Epperson Law Group?

Epperson Law Group is a law firm. Firms of this type routinely handle confidential client information, case files, correspondence, financial records related to legal matters, and personal identifiers necessary to represent individuals or businesses. Because legal work often involves highly sensitive personal circumstances—family disputes, financial settlements, employment issues, or other private legal affairs—any unauthorized access can carry lasting consequences for the people involved. A breach at such an organization is consequential precisely because the data held is rarely generic; it is tied to real legal relationships and personal histories that clients expect to remain protected.

What data was at risk

The facts name only that internal files were allegedly exfiltrated in a ransomware attack. No further breakdown of file types, categories of personal information, or specific data elements has been disclosed. Organizations in the legal sector typically maintain client contact details, case documents, billing records, identification documents, and correspondence that may contain sensitive personal or financial information. Whether any of those categories were among the files claimed by interlock remains unconfirmed. Readers should therefore treat the precise contents of the stolen material as unknown at this time.

The real-world impact

For individuals whose information may have been involved, the concrete risks include potential misuse of personal details for fraud or social-engineering attempts, unwanted public exposure of private legal matters, and the need to monitor accounts and credit for unusual activity over an extended period. Because the number of people affected is unknown, anyone who has been a client or otherwise shared data with the firm has reason to remain alert. For the organization itself, the incident can disrupt normal operations, damage client trust, and create ongoing legal and regulatory obligations to notify affected parties and secure remaining systems. These effects are real even when the full technical picture stays incomplete.

What to do if you're exposed

If you have reason to believe your information may have been held by Epperson Law Group, begin by placing fraud alerts with the major credit bureaus and carefully reviewing recent account statements and credit reports for unfamiliar activity. Change passwords on any accounts that may have shared credentials or personal details with the firm, and enable multi-factor authentication wherever it is available. Be cautious of unexpected emails, calls or messages that reference legal matters or request personal information; these can be phishing attempts that exploit knowledge of a breach. Keep records of any notifications you receive from the firm or from authorities. Finally, readers can run a free exposure scan of their email address to check whether their information has already surfaced in known breach data sets, providing an additional early-warning step while official details continue to emerge.

AICompiled with AI assistance from public sources and published under our editorial standards.