Levicoff Law Firm, P.C Listed by medusa Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On 5 December 2024 the Levicoff Law Firm, P.C. appeared on a listing published by the medusa ransomware group. For anyone who has dealt with the firm—clients in accident, employment or commercial disputes, opposing parties, or even staff—the practical stakes are immediate: internal files said to total 246.6 GB may now sit outside the firm’s control. How many people are affected remains unknown, and the precise contents of those files have not been independently confirmed.

Public detail is limited to the group’s own claims and a short organisational description. That scarcity itself matters; without verified counts or a clear inventory of records, individuals cannot yet know whether their own information is among the material the attackers say they took.

Breaking down the breach

According to the reported summary, the medusa group listed Levicoff Law Firm, P.C. on 5 December 2024 and stated that it had exfiltrated 246.6 GB of internal files in a ransomware attack. The number of people whose data may be involved is listed as unknown. No independent confirmation of the intrusion method, the exact date of compromise, or the full scope of systems affected has been made public. The group further claimed that “the poor leadership team begged us for 1000$ to solve their problem and keep their sensitive data safe,” though the statement trails off and has not been corroborated by the firm or by law-enforcement sources. All figures and assertions about volume and negotiations therefore remain claims advanced by the attackers rather than Reported Facts.

Inside medusa

Medusa is a well-documented ransomware operation that has operated for several years under a double-extortion model. The group typically encrypts a victim’s systems, exfiltrates large volumes of data beforehand, and then threatens to publish the stolen material on a dedicated leak site if a ransom is not paid. Public reporting on prior campaigns shows that medusa has targeted organisations across healthcare, education, manufacturing and professional services, often posting sample files and total data volumes to pressure victims. Its listings are claims of successful intrusion; they do not by themselves prove that every file named was in fact taken or that every organisation listed was fully compromised. In this instance the group’s post simply names Levicoff Law Firm, P.C., asserts the 246.6 GB figure, and includes the incomplete remark about a $1 000 request; nothing further has been independently verified.

Levicoff Law Firm, P.C and its sector

Levicoff Law Firm, P.C. is a Pittsburgh-based civil-litigation practice with eleven employees and an office at 4 PPG Place, Suite 200. Its work covers accident and injury cases, construction matters, insurance disputes, employment issues, contract claims, commercial torts and other business litigation. Law firms of this size routinely hold client intake forms, medical records, financial statements, correspondence, discovery materials and internal case strategies—documents that are both commercially sensitive and often protected by attorney-client privilege. A breach at such an organisation therefore carries consequences that extend beyond ordinary corporate data loss: confidentiality obligations, ethical rules and potential regulatory exposure all come into play once client files leave the firm’s custody.

What data was at risk

The only data type named in the available record is “internal files exfiltrated in ransomware attack,” with a claimed volume of 246.6 GB. Exact categories—whether client names, Social Security numbers, medical records, bank details or privileged work product—are not disclosed. Organisations of this kind typically retain precisely those categories of information, yet it remains unconfirmed which, if any, of them were among the material the attackers say they removed. Public statements have not supplied a file inventory or a sample set that would allow independent verification.

The real-world impact

For individuals whose records may be involved, the concrete risks include identity theft, targeted phishing that leverages case-specific details, and the possible public exposure of private medical or financial information. For the firm itself, the consequences include potential ethical complaints, loss of client trust, and the operational burden of notifying parties and cooperating with any investigation. Because the number of affected people is unknown and the precise contents of the 246.6 GB remain unverified, the full scale of harm cannot yet be measured; the risk, however, is real for anyone who has shared sensitive material with the practice.

What to do if you're exposed

If you have been a client, opposing party or employee of Levicoff Law Firm, P.C., consider the following practical steps:

• Monitor bank and credit-card statements for unfamiliar activity and place a free fraud alert with the major credit bureaus.
• Change passwords on any accounts that may have used the same credentials supplied to the firm, and enable multi-factor authentication where available.
• Watch for phishing emails or calls that reference specific legal matters you discussed with the firm; treat unexpected requests for further personal data with caution.
• Request a free annual credit report and review it for new accounts or inquiries you do not recognise.
• Run a free exposure scan of your email address against known breach data sets to see whether your information has already appeared in other publicly indexed incidents.

These measures do not reverse the listing, but they reduce the chance that any exposed material can be used against you in the weeks and months ahead. Official notifications, if they are issued, should be read carefully and followed promptly.

AICompiled with AI assistance from public sources and published under our editorial standards.