Goodman Mintz LLP Listed by revil Ransomware Group: Ransomware Claim — What’s Alleged & What To Do
The Goodman Mintz LLP Listed by revil Ransomware Group (reported June 1, 2020) is an unverified claim; the data involved is undisclosed belonging to roughly unknown people. If you have an account with them, your information may now be circulating on the open web and with data brokers. Here’s exactly what happened, how to check if you were affected, and what to do next.
On June 1, 2020, Goodman Mintz LLP was listed on a leak site operated by the revil ransomware group. The listing states that the group obtained internal files from the organization during a ransomware incident. The number of individuals affected has not been reported, and no additional details about the timing, method, or volume of data have been made public.
The appearance of the firm on the site constitutes the primary public record of the event. No independent confirmation of the data’s contents or subsequent distribution has been issued by the organization or by investigators.
Breaking down the breach
The only confirmed information is the June 1, 2020 listing on the revil leak site and the group’s assertion that internal files were taken. No dates for initial access, encryption, or exfiltration have been disclosed. The scale of the operation, measured either in file count or affected individuals, remains unknown. No statement from Goodman Mintz LLP describing its response or any ransom demand has been published in connection with the listing.
The group behind it: revil
REvil is a ransomware operation that has conducted multiple campaigns against organizations since at least 2019. Its documented pattern involves encrypting systems and, when payment is not received, publishing samples or directories of stolen material on a dedicated leak site. The group has previously listed entities in professional services, manufacturing, and local government. In this instance the site listing serves as the group’s claim of possession; no independent verification of the claim has been reported.
Who is Goodman Mintz LLP?
Goodman Mintz LLP operates as a law firm. Firms of this type routinely maintain client matter files, correspondence, billing records, and identification documents required for legal representation. Because such material is protected by professional confidentiality obligations, any unauthorized access carries implications for client privacy and regulatory compliance even when the precise records involved are not yet known.
What was likely exposed
The listing refers to “internal files exfiltrated in ransomware attack.” No inventory of file types or client names has been released. Law firms commonly store client personal information, financial details, and privileged communications; however, whether any of these categories were among the files referenced in the listing is unconfirmed. The exact data elements remain undisclosed.
What's at stake
Individuals whose information appears in law-firm records may face risks of identity misuse or unwanted disclosure of sensitive legal matters. For the organization, the incident adds to the body of publicly reported ransomware listings involving professional-services firms, which can affect client trust and trigger regulatory or contractual review. Both the duration of any data availability and the extent of subsequent use are presently unknown.
If your data was in this claimed breach
Monitor financial and government accounts for unusual activity and consider placing fraud alerts with credit reporting agencies. Review any communications received from Goodman Mintz LLP regarding the incident. Individuals may also run a free exposure scan of their email address against known breach data sets to determine whether their information has appeared in other publicly reported incidents.
AICompiled with AI assistance from public sources and published under our editorial standards.
How this breach connects
More recent breaches
Banco Estado (Public Bank) Listed by revil Ransomware GroupNational Western Life (insurance) Listed by revil Ransomware GroupActuaries and Associates (retirement specialist) Listed by revil Ransomware GroupAllen, Dyer, Doppelt, & Gilchrist, P.A. Listed by revil Ransomware GroupLatest breaches
Read GalaxyWarden’s full analysis of the Goodman Mintz LLP Listed by revil Ransomware Group →
Publicly posted by revil — unverified claim, pending independent verification
Breach listings — particularly those originating from ransomware or leak sites — are third-party claims that may be unverified, incomplete, or inaccurate. A listing does not by itself confirm that a breach occurred or that any specific data was exposed. Severity is an automated assessment, not a definitive rating. Verification status is shown where available.
Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. This information is aggregated from public sources for awareness only and is not legal, security, or investment advice.