Sally B Gold Listed by lynx Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On April 8, 2025, the Law Offices of Sally B. Gold, LLC, a Baltimore-based family law firm, was listed by the lynx ransomware group as a victim of a ransomware attack in which internal files were reportedly exfiltrated. Public details remain limited: the number of people affected is unknown, and no further specifics on timing, method, or confirmed data volumes have been disclosed beyond the group's claim and the reported summary of the incident.

This matters because law firms routinely handle highly sensitive personal and legal information. Even without a full accounting of what left the network, the listing alone signals potential exposure for clients and the firm itself, underscoring the need for clear facts over speculation.

Breaking down the breach

According to the available record, Sally B Gold was listed by the lynx ransomware group on or around April 8, 2025. The reported summary states that internal files were exfiltrated in a ransomware attack. No confirmed figures for the number of individuals affected have been released, and details such as the precise date of intrusion, the attack vector, the volume of data taken, or any ransom demand remain undisclosed in public reporting. The listing itself constitutes a claim by the group rather than an independently verified confirmation of every asserted detail. At present, the core known elements are the victim organization, the attribution to lynx, the date of the listing, and the characterization of the data as internal files removed during a ransomware incident.

The group behind it: lynx

Lynx is a ransomware operation that has appeared in public reporting as a group employing double-extortion tactics: encrypting systems while also stealing data and threatening to publish it if demands are not met. Like other contemporary ransomware actors, it has been observed listing victims on leak sites to apply pressure. Public knowledge of the group centers on its use of ransomware-as-a-service models and its focus on organizations holding valuable or sensitive records. In this case, the group claims to have listed Sally B Gold after exfiltrating internal files; no additional statements or proof packages specific to this victim beyond that listing are included in the facts provided. Claims made on such sites should be treated as assertions pending independent verification.

About Sally B Gold

Law Offices of Sally B. Gold, LLC is a law firm located in downtown Baltimore, Maryland, founded in 1992. Its practice centers on family law matters, including prenuptial agreements, divorce, alimony, child custody, separation agreements, and domestic violence cases. Firms of this type routinely manage confidential client communications, court filings, financial disclosures, personal identifying information, and records related to children and domestic circumstances. A breach involving such an organization is consequential because the data it holds is often intimate, long-lived, and capable of affecting legal proceedings, personal safety, and financial standing if it becomes public or falls into the wrong hands. The firm's established presence in the Baltimore legal community means any confirmed exposure could reach clients across a range of family-law matters spanning decades of practice.

What was likely exposed

The facts name the exposed material as internal files exfiltrated in a ransomware attack. No further breakdown of file types, client records, or specific data categories has been disclosed. Organizations of this kind typically hold client intake forms, correspondence, financial affidavits, custody evaluations, medical or counseling references, Social Security numbers, addresses, and case strategy documents. Because the exact contents remain unconfirmed, it is not possible to state with certainty which of these categories, if any, were among the files taken. Readers should treat the description "internal files" as the limit of what has been publicly reported and avoid assuming particular documents were or were not involved.

The real-world impact

For individuals whose information may have been among the internal files, the practical risks include potential misuse of personal details for identity fraud, targeted scams that reference family-law matters, or the unauthorized disclosure of sensitive domestic circumstances. Even without confirmed identity theft, the mere possibility of private legal records circulating can create lasting anxiety and complicate ongoing court cases. For the firm, the incident raises operational, reputational, and regulatory considerations common to any professional services organization that experiences a ransomware event involving data theft. Clients may need to reassess the security of their own records, and the firm faces the ordinary burdens of investigation, notification where required, and restoration of systems. Because the number of people affected is unknown, the full scope of these effects cannot yet be quantified.

If your data was in this claimed breach

If you have been a client of the Law Offices of Sally B. Gold or otherwise believe your information may have been held by the firm, begin by monitoring financial accounts and credit reports for unusual activity. Consider placing a fraud alert or credit freeze with the major credit bureaus, and be cautious of unsolicited communications that reference family-law details. Change passwords on any accounts that may have shared credentials or recovery information with the firm, and enable multi-factor authentication where available. Document any suspicious contacts. Readers can also run a free exposure scan of their email address to check whether their information has already surfaced in known breach data sets, which can help prioritize further protective steps while official notifications, if any, are still pending.

AICompiled with AI assistance from public sources and published under our editorial standards.