Martin Showers Smith& McDonald Listed by akira Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

When a law firm that handles personal injury, family law and civil litigation appears on a ransomware group's leak site, the people most directly affected are often clients who shared passports, Social Security numbers, birth and death certificates, driver's licenses and other highly sensitive records in the course of seeking legal help. Those documents, once outside the firm's control, can be used for identity theft, financial fraud or further targeting of the individuals involved. Public detail remains limited, but the listing itself signals that internal files may already have left the organisation.

On 29 May 2025 the ransomware group known as akira claimed responsibility for an attack on Martin Showers Smith& McDonald, stating it had exfiltrated more than 8 GB of documents and was prepared to publish them. The number of people whose information may be involved has not been disclosed. What follows is a factual account of what is known, what remains unconfirmed, and the practical implications for anyone who has dealt with the firm.

Breaking down the breach

According to the public listing, Martin Showers Smith& McDonald was named by the akira ransomware group on or around 29 May 2025. The group asserted that it had carried out a ransomware attack in which internal files were exfiltrated. It further claimed it was ready to upload more than 8 GB of documents, stating that more than half consisted of scans of client personal documents (passports, Social Security numbers, death and birth certificates, driver's licenses and more), together with employee information, confidential documents and court reports. No independent confirmation of the volume, the exact contents or the success of any encryption has been made public. The number of individuals affected remains unknown. Timing of the initial intrusion, the method of access and whether any ransom demand was paid are all undisclosed.

Who is akira?

Akira is a well-documented ransomware operation that emerged in 2023 and has since targeted organisations across multiple sectors, including professional services. The group typically employs a double-extortion model: after gaining access to a network it steals data, encrypts systems where possible, and then threatens to publish the stolen material on a dedicated leak site if payment is not made. Listings on that site are claims by the group itself and should be treated as unverified until corroborated by the victim organisation or independent investigators. Akira has previously published large volumes of corporate and personal records when negotiations failed, and its operators have shown a pattern of focusing on mid-sized firms that hold valuable client data. No further statements by the group specifically about this victim beyond the leak-site claim have been reported.

Who is Martin Showers Smith& McDonald?

Martin Showers Smith& McDonald, also referred to in some records as Martin, Showers, Smith McDonald, LLC, is a law firm that specialises in civil litigation, trial law, personal injury and family law. Firms of this type routinely collect and retain extensive personal and financial information from clients, opposing parties and employees in order to prepare cases, file court documents and manage settlements. Because the practice areas involve injury claims, family disputes and litigation, the records often include medical details, financial statements, identity documents and confidential court filings. A breach at such an organisation is consequential precisely because the data are both sensitive and difficult for individuals to change or revoke once disclosed.

What data was at risk

The only data types named in connection with the incident are internal files said to have been exfiltrated in a ransomware attack. The akira group claims that more than half of the more than 8 GB it says it holds consists of scans of client personal documents—passports, Social Security numbers, death and birth certificates, driver's licenses and similar records—along with employee information, confidential documents and court reports. These assertions come solely from the group's listing and have not been independently verified. Exact contents, file counts and whether any particular client's records are included remain unconfirmed. Law firms of this kind typically hold precisely the categories of material the group describes, but that general pattern does not establish what was taken in this specific case.

Why it matters

For individuals whose records may be among the files, the practical risks include identity theft, fraudulent loan or credit applications, tax-refund fraud and targeted social-engineering attempts that exploit knowledge of personal or legal circumstances. Court reports and confidential case materials can also expose litigation strategy or private family matters. For the firm itself, the incident raises questions of client trust, potential regulatory notification obligations and the cost of forensic investigation and remediation. Because the number of people affected is unknown and the precise data set is unconfirmed, the full scope of harm cannot yet be measured. The listing alone, however, is sufficient reason for anyone who has provided identity documents or sensitive personal information to the firm to treat the possibility of exposure seriously.

Were you affected?

If you are a current or former client, employee or other party who has shared personal documents with Martin Showers Smith& McDonald, begin by monitoring financial accounts and credit reports for unusual activity. Consider placing a fraud alert or credit freeze with the major credit bureaus and remain alert to unsolicited contacts that reference your legal matters or personal details. Change passwords on any accounts that may have used the same credentials or recovery information supplied to the firm. Readers can also run a free exposure scan of their email address to check whether their information has already surfaced in known breach data sets. Official confirmation from the firm, if and when it is issued, should be treated as the authoritative source for next steps.

AICompiled with AI assistance from public sources and published under our editorial standards.