Erickson Thorpe & Swainston Listed by dragonforce Ransomware Group: Ransomware Claim — What’s Alleged & What To Do
Erickson Thorpe & Swainston was listed by the dragonforce ransomware group on February 02, 2026, after internal files were exfiltrated in a ransomware attack. The number of individuals affected has not been disclosed; anyone who may have shared personal information with the firm should verify their status and take protective steps.
Inside the incident
Public reporting on the event is confined to the group’s listing of the firm. No information has been released about the date of the intrusion, the method of access, the volume of data taken, or whether any ransom demand was issued or met. The firm has not issued a statement confirming or denying the incident.
Who is dragonforce?
Dragonforce is a ransomware group that maintains a public leak site where it lists organizations it claims to have compromised. The group typically exfiltrates internal data before deploying encryption and then posts samples or file listings to pressure victims. Its listings are presented as claims by the group; independent confirmation of individual incidents is not always available at the time of posting.
Erickson Thorpe & Swainston and its sector
Erickson Thorpe & Swainston is a law firm established in 1969 that represents clients in state and federal courts in Nevada and Northern California. Its work focuses on trial and appellate matters. Law firms routinely hold client communications, case files, financial records, and personal identifying information belonging to clients, opposing parties, and employees.
What was likely exposed
The listing states that internal files were exfiltrated. No further inventory of file types or data categories has been made public. The exact contents therefore remain unconfirmed.
What's at stake
Exposure of internal legal files can affect client confidentiality and ongoing matters. Individuals whose information appears in those files may face risks of identity misuse or unwanted disclosure of sensitive personal details. The firm itself may incur costs related to investigation, notification, and remediation, though none of these outcomes have been quantified publicly.
If your data was in this claimed breach
Monitor accounts for unusual activity and consider placing fraud alerts with credit bureaus. Review any communications from the firm regarding the incident. Readers can run a free exposure scan of their email address against known breach data to check for prior appearances of their information.
- Change passwords for any accounts linked to the firm.
- Enable multi-factor authentication on email and financial accounts.
- Watch statements and reports for signs of unauthorized use.
AICompiled with AI assistance from public sources and published under our editorial standards.
How this breach connects
More recent breaches
amplesurveyor.com Listed by dragonforce Ransomware GroupSayre Associates Listed by dragonforce Ransomware Groupdentonfirm.com Listed by dragonforce Ransomware Groupwaypointsolutions.com Listed by dragonforce Ransomware GroupLatest breaches
Publicly posted by dragonforce — unverified claim, pending independent verification
Breach listings — particularly those originating from ransomware or leak sites — are third-party claims that may be unverified, incomplete, or inaccurate. A listing does not by itself confirm that a breach occurred or that any specific data was exposed. Severity is an automated assessment, not a definitive rating. Verification status is shown where available.
Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. This information is aggregated from public sources for awareness only and is not legal, security, or investment advice.