Molod Spitz & DeSantis Listed by akira Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

Ransomware groups continue to target professional-services firms that hold sensitive client and operational records, using data theft as leverage even when encryption is secondary. In this landscape, the listing of Molod Spitz & DeSantis by the akira ransomware group on 10 September 2025 fits a familiar pattern of claimed exfiltration and threatened publication.

Public reporting indicates that Molod Spitz & DeSantis, P.C., a New York and New Jersey liability-defense firm, has been named on an akira leak site. The group claims it will upload 62 GB of corporate data taken in a ransomware attack. The number of people affected remains unknown, and independent confirmation of the full scope is not yet available. The incident matters because law firms routinely handle privileged material whose exposure can create lasting legal and personal risk for clients, employees and the firm itself.

Inside the incident

According to the available record, Molod Spitz & DeSantis was listed by the akira ransomware group on 10 September 2025. The listing describes an attack in which internal files were allegedly exfiltrated. The group states it intends to publish 62 GB of corporate data. No further technical details—such as the initial access vector, the precise date of intrusion, or whether systems were encrypted—have been disclosed in the public facts. The number of individuals whose information may be involved is listed as unknown. All claims about the volume and content of the data originate from the group’s own leak-site statement and have not been independently verified in the material provided.

The group behind it: akira

Akira is a ransomware operation that has been active since early 2023. It is known for a double-extortion model: operators encrypt victim systems while simultaneously stealing data and threatening to publish it if a ransom is not paid. The group typically posts victims on a dedicated leak site, often with sample files or volume claims, and has targeted organizations across manufacturing, education, professional services and other sectors. Public reporting consistently describes akira as opportunistic rather than exclusively focused on any single industry. In the present case the group claims it will upload 62 GB of data belonging to Molod Spitz & DeSantis; that assertion remains an unverified claim pending further confirmation.

Who is Molod Spitz & DeSantis?

Molod Spitz & DeSantis, P.C. is a law firm that specializes in defending clients in complex liability matters before New York and New Jersey courts. The firm describes itself as trial-ready, with a record of successful verdicts and an emphasis on tracking performance metrics. Like most litigation practices, it routinely manages case files, client communications, contracts, investigative materials and internal administrative records. A breach at such a firm is consequential because the data it holds is often privileged, personally sensitive or commercially confidential, and its unauthorized disclosure can affect ongoing litigation, client relationships and regulatory obligations.

The information in question

The public facts state that internal files were exfiltrated in a ransomware attack. The akira group claims the 62 GB dataset includes employee documents, medical information, confidential agreements, customer information, detailed finance and accounting files, client information, contracts and agreements with customers, police reports, investigations, court hearings and NDAs. These categories are presented solely as the group’s assertions; the exact contents and whether every listed category is present remain unconfirmed. Organizations of this type typically hold privileged case materials, personal identifiers of clients and staff, financial records and contractual documents, any of which could create exposure if released. Until independent verification occurs, the precise composition of the claimed archive cannot be treated as established fact.

Why it matters

For individuals whose data may be involved, the practical risks include identity misuse, targeted phishing, and the unwanted public airing of medical or legal details. Clients could face strategic disadvantage if opposing parties obtain privileged material. Employees may encounter personal or financial exposure. For the firm itself, the incident raises questions of client trust, potential regulatory notification duties, and the cost of forensic review and remediation. Because the number of people affected is unknown and the full data set is unconfirmed, the scale of these risks cannot yet be quantified, but the nature of the claimed material makes the exposure non-trivial.

What to do if you're exposed

If you have a past or present relationship with Molod Spitz & DeSantis—as a client, employee or vendor—consider the following practical steps while public details remain limited:

• Monitor financial and credit accounts for unusual activity and consider a fraud alert with the major credit bureaus.
• Treat unsolicited emails or calls that reference the firm or legal matters with heightened caution; verify any request through known official channels.
• If you receive notification from the firm, follow the specific guidance it provides regarding credit monitoring or identity-protection services.
• Preserve any relevant correspondence in case it becomes useful for later verification or claims.

Readers can also run a free exposure scan of their email address to check whether their information has already appeared in known breach data sets. Remaining attentive to official updates from the firm and from law-enforcement or regulatory sources remains the most reliable way to assess personal impact as further facts emerge.

AICompiled with AI assistance from public sources and published under our editorial standards.