MacGillivray Law Listed by meow Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On September 30, 2024, the Canadian law firm MacGillivray Law was listed by the meow ransomware group as a victim of a ransomware attack in which internal files were claimed to have been exfiltrated. Public details remain limited: the number of people affected is unknown, and no further technical specifics about the intrusion have been disclosed. The listing itself is a claim by the group rather than an independently confirmed account of the full scope of the incident.

For a firm that handles personal injury and insurance litigation across multiple provinces, any unauthorized access to internal files raises immediate questions about the potential exposure of sensitive client and operational information. What is known so far is confined to the group's public listing and the description of exfiltrated internal files; everything else is unconfirmed.

Inside the incident

According to the available record, MacGillivray Law appeared on the meow ransomware group's listings on September 30, 2024. The group asserts that internal files were exfiltrated as part of a ransomware attack. No public figures have been released for the volume of data taken, the number of individuals whose information may be involved, or the precise date the intrusion began. The method of initial access, the duration of any presence inside the network, and whether encryption was also deployed remain undisclosed. At present the incident is known primarily through the threat actor's claim rather than through detailed statements from the firm or independent forensic reporting.

The group behind it: meow

Meow is a ransomware operation that has appeared in public reporting as a group that conducts double-extortion attacks: encrypting systems while also stealing data and threatening to publish it on a dedicated leak site if payment is not made. Like other contemporary ransomware actors, meow typically lists victims by name and sometimes posts sample files or larger archives to pressure organizations. Its listings are claims made by the group itself; they do not automatically constitute verified proof of every detail asserted. Public knowledge of meow centers on this pattern of ransomware deployment, data theft, and leak-site publication rather than on any unique technical signature that has been confirmed in the MacGillivray Law case. No statements attributed to meow beyond the listing of this firm are part of the current public record for the incident.

About MacGillivray Law

MacGillivray Law is a Canadian law firm focused on personal injury and insurance litigation. It maintains offices in Nova Scotia, New Brunswick, and Newfoundland and works with clients seeking compensation after injuries or assistance with insurance claims. Firms of this type routinely manage case files that contain medical records, insurance correspondence, financial details, personal identifiers, and privileged communications between lawyers and clients. Because the practice is client-centered and spans multiple provinces, the firm holds information that is both sensitive and regulated under Canadian privacy and professional-conduct rules. A ransomware incident involving internal files therefore carries particular weight: the data at stake is not generic corporate material but material that can directly affect individuals already dealing with injury or insurance disputes.

The information in question

The only data type named in the public record is "internal files" said to have been exfiltrated during the ransomware attack. No inventory of specific document categories, file counts, or named individuals has been released. Organizations such as MacGillivray Law typically store client intake forms, medical and accident reports, insurance claim documents, correspondence, billing records, and internal work product. Whether any of those categories were among the files taken remains unconfirmed. Until more precise disclosure occurs, the exact contents of the exfiltrated material cannot be stated as fact.

Why it matters

For people whose information may have been among the internal files, the practical risks include potential misuse of personal identifiers, medical details, or financial data for fraud, identity theft, or targeted social-engineering attempts. Even if the files are never published, the mere fact of unauthorized access can create lasting uncertainty. For the firm itself, the incident raises operational, regulatory, and reputational considerations: law firms are expected to safeguard privileged and confidential client material, and any confirmed breach can trigger notification duties under Canadian privacy law as well as professional obligations. Because the number of affected individuals is unknown and the precise data types remain undisclosed, the full scale of these risks cannot yet be measured, but the nature of the practice makes the potential impact concrete rather than abstract.

If your data was in this claimed breach

If you are a current or former client of MacGillivray Law, or if you have reason to believe your information may have been held in the firm's systems, begin by monitoring financial accounts and credit reports for unexpected activity. Consider placing fraud alerts with major credit bureaus and changing passwords on any accounts that used the same email address associated with the firm. Retain any official notifications you receive from the firm and follow the guidance they provide. You can also run a free exposure scan of your email address to check whether it has already appeared in known breach data sets; such a scan is a practical first step for assessing whether your information has surfaced elsewhere. Public detail on this specific incident remains limited, so continued attention to official updates from the firm is advisable.

AICompiled with AI assistance from public sources and published under our editorial standards.