Moskowitz, Mandell & Salim, P.A. Listed by quantum Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

When a law firm appears on a ransomware group's leak site, the practical concern for clients and contacts is straightforward: internal files may have left the firm's control, and those files can contain personal, financial, or legal details that outsiders should never see. Public reporting places Moskowitz, Mandell & Salim, P.A. on a listing by the group known as quantum, with the matter noted on August 23, 2022. How many people are affected remains unknown, and the exact contents of what was taken have not been fully itemised in available detail.

For anyone who has used the firm for real estate, estate planning, corporate work, or related matters, the stakes are concrete. Legal files often hold identity information, property records, financial arrangements, and correspondence that can be misused for fraud or pressure. Until more is confirmed, the responsible approach is to treat the claim seriously, understand what is and is not known, and take measured steps to reduce personal risk.

Inside the incident

According to public breach reporting, Moskowitz, Mandell & Salim, P.A. was listed by the quantum ransomware group, with the report dated August 23, 2022. The available summary states that internal files were exfiltrated in a ransomware attack. The number of people affected is unknown. No further public detail has been provided in the record about the precise timing of intrusion, the initial access method, whether systems were encrypted as well as copied, or whether any ransom demand or negotiation occurred.

What is stated is limited: a claim of exfiltration of internal files, attributed to a ransomware incident, and a listing associated with quantum. Without confirmation from the firm or independent forensic disclosure, the listing itself should be read as the group's assertion rather than a fully verified account of every technical step. Scale, specific file inventories, and the full scope of systems involved remain undisclosed in the facts at hand.

Who is quantum?

Quantum is a ransomware operation that has been documented in public cybersecurity reporting as using double-extortion tactics: encrypting victim systems while also copying data and threatening to publish it if payment is not made. Groups of this type commonly maintain leak sites where they name organisations and, in some cases, release samples or larger archives to increase pressure. Their activity has been observed across multiple sectors, with victim listings used as both leverage and advertising of capability.

In this case, the public record indicates that quantum listed Moskowitz, Mandell & Salim, P.A. The group claims involvement through that listing and through the associated description of internal files taken in a ransomware attack. No additional statements from the group about this specific victim—beyond the fact of the listing and the exfiltration claim—are included in the provided facts, and those claims should be treated as unverified until corroborated.

Who is Moskowitz, Mandell & Salim, P.A.?

Moskowitz, Mandell & Salim, P.A. is a law firm established in 1985. It provides legal services in governmental approval, commercial real estate, zoning and land use, corporate transactional law, estate planning, and community association law, with an emphasis on complex commercial litigation. Firms of this kind routinely handle sensitive client matters: property and development files, corporate documents, estate and succession materials, and litigation records that can include personal identifiers, financial data, and privileged communications.

A breach involving a practice in these areas is consequential because the information is not generic. Zoning and real-estate work can involve ownership details and transaction terms; estate planning can involve family and asset information; corporate and litigation files can contain strategy, contracts, and opposing-party data. Even when the exact inventory of taken files is unknown, the nature of the practice explains why clients, counterparties, and associated individuals have a legitimate interest in understanding what happened and what residual risk may remain.

What was likely exposed

The facts name the exposed material as internal files exfiltrated in a ransomware attack. No further breakdown—such as specific categories of personal data, client lists, financial records, or document counts—is provided. The number of people affected is unknown.

Organisations of this type typically hold client contact information, identification details, contracts, property and zoning records, estate-planning documents, corporate transaction files, and internal correspondence. It is reasonable to expect that some mix of such materials could have been among internal files, but the exact contents in this incident are unconfirmed. Readers should not assume any particular document or data field was or was not included; only that internal files are described as having been taken, and that the full inventory has not been publicly detailed in the available record.

The real-world impact

For individuals whose information may have been in those files, the practical risks include targeted phishing, identity misuse, and fraud that references real legal or property matters to appear legitimate. Details from estate, real-estate, or corporate files can give criminals enough context to craft convincing messages or to attempt account takeovers elsewhere. Because the count of affected people is unknown and the file list is not public, people connected to the firm cannot easily self-identify from a published roster; caution is therefore broader than a single confirmed list.

For the firm, a ransomware incident that includes exfiltration raises operational, professional, and regulatory considerations common to legal practices: preserving client confidentiality, assessing notification duties, and restoring secure operations. The facts do not establish negligence or assign fault; they establish a reported listing and a claim of internal-file exfiltration. Impact on reputation and client trust can follow any such event regardless of root cause, which is why clear communication and careful handling of residual risk matter for both the organisation and the people it serves.

If your data was in this claimed breach

If you are a client, former client, or other contact of Moskowitz, Mandell & Salim, P.A., treat the situation as a prompt to tighten basic defences. Monitor bank, credit, and email accounts for unexpected activity. Be sceptical of unsolicited messages that reference legal matters, property, estates, or the firm itself, especially if they urge urgent payment or credential entry. Consider placing fraud alerts with major credit bureaus if you have reason to believe sensitive identity data may have been involved. Change passwords on important accounts if you reused any credential in communications with the firm, and enable multi-factor authentication where it is available.

Public detail on this incident remains limited: the affected population is unknown, and only internal files are named as exfiltrated. Staying alert without panicking is the proportionate response. You can also run a free exposure scan of your email address to check whether your information has already surfaced in known breach data sets, which can help you prioritise further monitoring and password changes.

AICompiled with AI assistance from public sources and published under our editorial standards.