McCormick & Priore Listed by interlock Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On December 9, 2024, the defense litigation firm McCormick & Priore was listed by the interlock ransomware group. Public reporting indicates the group claims to have carried out a ransomware attack that involved the exfiltration of internal files. The number of people affected is unknown, and independent confirmation of the full scope remains limited.

The listing matters because law firms routinely handle sensitive client matters, employee records, and internal operational data. Any confirmed exposure of such material can create lasting risks for individuals and for the firm’s ability to protect privileged information.

Breaking down the breach

According to the available record, McCormick & Priore was publicly listed by interlock on December 9, 2024. The group’s statement describes a ransomware attack in which internal files were allegedly exfiltrated. It further claims to present “a large collection of SQL databases, confidential data of employees and clients.” No verified count of affected individuals has been released, and details such as the precise date of intrusion, the initial access method, or the volume of data taken have not been disclosed in public sources. The incident is therefore known primarily through the group’s leak-site claim rather than through a detailed official disclosure from the firm.

The group behind it: interlock

Interlock is a ransomware operation that has been observed conducting double-extortion campaigns: encrypting systems while also stealing data and threatening to publish it if a ransom is not paid. Like many contemporary ransomware groups, it typically advertises victims on a dedicated leak site and posts samples or descriptions of stolen material to increase pressure. Public reporting has linked interlock to attacks across multiple sectors, often involving the theft of databases and internal documents. In this case, the group’s listing of McCormick & Priore and its description of SQL databases and confidential employee and client data should be treated as an unverified claim unless independently confirmed.

About McCormick & Priore

McCormick & Priore is a defense litigation firm that describes itself as large enough to supply in-depth legal expertise while remaining focused enough to give individualized attention to clients. Defense litigation practices typically represent clients in civil and commercial disputes, insurance-related matters, and other contested proceedings. Organizations of this type commonly maintain case files, correspondence, discovery materials, billing records, and personnel information. A breach at such a firm is consequential because the data often includes privileged attorney-client communications, personal identifiers of employees and clients, and strategic information that could be misused if it falls into the wrong hands.

What was likely exposed

The facts state that internal files were exfiltrated in a ransomware attack. The interlock group specifically claims to hold a large collection of SQL databases together with confidential data of employees and clients. Beyond that claim, the exact contents have not been independently itemized in public reporting. Law firms of this kind ordinarily store client contact details, case-related documents, financial records, and employee personnel files; however, whether any particular category was present in the stolen material remains unconfirmed. Readers should therefore treat the group’s description as an assertion rather than verified inventory.

What's at stake

For individuals whose information may have been involved, the primary risks include identity theft, targeted phishing, and the possible misuse of personal or financial details. Clients could face exposure of sensitive legal matters that were expected to remain confidential. For the firm itself, the stakes include potential regulatory scrutiny, reputational harm, disruption of ongoing litigation work, and the cost of investigation and remediation. Because the number of affected people is unknown and the precise data set is unconfirmed, the full practical impact cannot yet be quantified, but the combination of employee and client data claimed by the group is inherently high-value to criminals.

If your data was in this claimed breach

If you have a past or present relationship with McCormick & Priore as a client, employee, or vendor, treat the possibility of exposure seriously. Monitor financial accounts and credit reports for unusual activity, enable multi-factor authentication on important accounts, and be alert for phishing messages that reference the firm or legal matters. Consider placing a fraud alert or credit freeze if you believe sensitive personal data may have been involved. You can also run a free exposure scan of your email address to check whether your information has already appeared in known breach data sets. Official notifications from the firm, if issued, should be followed carefully for any additional guidance specific to this incident.

AICompiled with AI assistance from public sources and published under our editorial standards.