McCague Borlack Listed by SilentRansomGroup Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

Ransomware groups continue to pressure professional-services firms by combining encryption with data theft and public leak-site listings. Law practices sit high on target lists because the files they hold are both commercially valuable and personally sensitive. Against that backdrop, McCague Borlack appeared on a SilentRansomGroup listing reported on 20 March 2025.

Public information remains limited: the firm has been named as a victim of a ransomware attack in which internal files were said to have been exfiltrated. The number of people affected is unknown, and no independent confirmation of the full scope has been released. The listing itself is a claim by the threat actor.

Inside the incident

According to the available record, McCague Borlack was listed by the SilentRansomGroup ransomware group on or about 20 March 2025. The only concrete detail supplied is that internal files were allegedly exfiltrated during a ransomware attack. No public statement has confirmed the precise date of intrusion, the initial access method, the volume of data taken, or whether systems were encrypted. The number of individuals whose information may be involved is listed as unknown. Beyond the group’s leak-site claim, further technical or forensic particulars have not been disclosed.

Who is SilentRansomGroup?

SilentRansomGroup is a ransomware operation that has appeared in public reporting since roughly 2022–2023. Like many contemporary groups, it typically follows a double-extortion model: encrypting systems while also stealing data and threatening to publish it on a dedicated leak site if a ransom is not paid. The group has previously listed organisations across professional services, manufacturing and other sectors. Its public posts usually consist of a victim name, sometimes a short description, and occasional sample files; these posts are claims made by the actors themselves and are not independently verified at the moment of listing. No additional statements attributed to SilentRansomGroup about McCague Borlack beyond the listing itself have been reported in the source material.

McCague Borlack and its sector

McCague Borlack is a full-service law firm founded in 1994. Its practice areas include accident benefits and related legal work. Law firms of this type routinely handle client files that contain personal identifiers, medical or insurance records, correspondence, financial details and privileged legal strategy. Because the firm provides advice across multiple practice lines, a successful intrusion can touch both current and historical client matters. In the broader legal sector, such breaches raise immediate concerns about solicitor-client privilege, regulatory notification duties and the potential for secondary misuse of the material.

The information in question

The only data category named in the public record is “internal files exfiltrated in a ransomware attack.” Exact file types, client names, or volumes have not been disclosed. Organisations of this kind typically store contracts, pleadings, medical and insurance documentation, contact details, billing records and internal memoranda. Until the firm or an independent investigation releases a verified inventory, it is not possible to state which of those categories—if any—were among the files claimed by the group. The precise contents therefore remain unconfirmed.

What's at stake

For individuals whose information may have been taken, the practical risks include identity fraud, targeted phishing that references genuine legal matters, and the possible exposure of sensitive personal or medical details. For the firm, the consequences centre on client trust, potential regulatory scrutiny under privacy and professional-conduct rules, and the operational cost of containment, notification and remediation. Because the number of affected people is unknown and the data inventory is incomplete, the full scale of these risks cannot yet be quantified. The leak-site listing itself can also create secondary pressure even if the files are never published in full.

If your data was in this claimed breach

If you have been a client or employee of McCague Borlack, treat any unexpected contact that references legal files with caution. Monitor financial and insurance accounts for unusual activity, enable multi-factor authentication on email and document portals, and consider placing a fraud alert with credit-reporting agencies if you reside in a jurisdiction that offers one. Keep records of any official notification you receive from the firm. Readers can also run a free exposure scan of their email address to check whether that address has already appeared in other known breach data sets; such a scan does not confirm involvement in this specific incident but can highlight broader exposure that warrants attention.

AICompiled with AI assistance from public sources and published under our editorial standards.