Salvi, Schostok & Pritchard P.C. Listed by frag Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On October 18, 2024, the Illinois law firm Salvi, Schostok & Pritchard P.C. was listed by the frag ransomware group. The group claims to have carried out a ransomware attack that involved the exfiltration of internal files. The number of people affected remains unknown, and public detail on the full scope of the incident is limited. Law firms of this type routinely handle highly sensitive client records, so any confirmed exposure of such material carries clear privacy and security implications for individuals who have sought legal representation.

What is known so far rests primarily on the group's leak-site listing and its accompanying claims. No independent confirmation of the breach's technical details, timeline, or exact volume of data has been made public at the time of reporting.

What happened

Salvi, Schostok & Pritchard P.C. appeared on a listing associated with the frag ransomware group on October 18, 2024. According to the group's statements, internal files were exfiltrated during a ransomware attack. The firm is described in public materials as a law practice focused on medical malpractice and personal injury matters. Beyond the listing date and the group's assertion that data was taken, specifics such as the method of initial access, the duration of any intrusion, the total volume of material involved, or whether systems were encrypted remain undisclosed. The number of individuals potentially affected is also unknown.

Inside frag

Frag is a ransomware group that operates in the established pattern of many modern ransomware actors. Publicly documented activity by such groups typically involves unauthorized access to networks, followed by data theft and the threat or execution of encryption, with victims then listed on dedicated leak sites if ransom demands are not met. This double-extortion approach—combining disruption with the public release or sale of stolen data—is a well-established tactic across the ransomware ecosystem. Frag's listing of Salvi, Schostok & Pritchard P.C. should be treated as an unverified claim by the group itself; no independent verification of the specific assertions made about this firm has been reported in the available facts. Prior public reporting on ransomware groups of this type shows they frequently target professional services organizations that hold concentrated volumes of personal and confidential records.

Salvi, Schostok & Pritchard P.C. and its sector

Salvi, Schostok & Pritchard P.C. is an Illinois-based law firm specializing in medical malpractice and personal injury cases. Public descriptions of the firm note that it has recovered more than $2.5 billion in verdicts and settlements for clients. Law practices of this nature routinely manage large volumes of client medical histories, personal contact details, financial information related to claims, and internal business records such as partnership agreements and contracts. Because these firms serve as trusted repositories for highly personal health and legal data, any unauthorized access can create lasting consequences for clients who may already be dealing with medical or injury-related challenges. The legal sector as a whole has been a recurring target for ransomware operators precisely because of the sensitivity and potential resale value of the records it holds.

The information in question

Public detail on the precise contents of any stolen material is limited to claims made by the frag group. The group has stated that it successfully extracted internal files and has specifically named the following categories:

• Customer medical documents
• Contact information of clients and employees
• Partnership agreements, licenses and contracts
• Medicare documents

These assertions have not been independently confirmed. Organizations of this type typically hold medical records, personal identifiers, correspondence, and contractual materials as a normal part of case work. Until further verified information becomes available, the exact nature and completeness of any exposed data set remain unconfirmed.

What's at stake

For individuals whose information may have been involved, the primary risks include potential misuse of medical details, contact information, or identifiers that could support identity theft, targeted phishing, or unauthorized access to related accounts. Medical and Medicare-related documents can reveal health conditions and treatment histories that are especially sensitive. For the firm itself, the incident raises operational, reputational, and regulatory considerations common to any professional services organization handling protected health and personal data. Because the number of people affected is unknown and the full contents of the claimed exfiltration are unverified, the concrete scale of harm cannot yet be measured. Affected parties may face long-term monitoring needs rather than immediate, dramatic consequences.

Were you affected?

If you are a current or former client, employee, or partner of Salvi, Schostok & Pritchard P.C., consider taking practical steps: monitor financial and medical accounts for unusual activity, place fraud alerts with credit bureaus if personal identifiers may be involved, and contact the firm directly for any official guidance it may issue. Preserve any communications you receive that appear related to the incident. Readers can also run a free exposure scan of their email address to check whether their information has already surfaced in known breach data sets. Public detail remains limited, so continued attention to official updates from the firm or relevant authorities is advisable.

AICompiled with AI assistance from public sources and published under our editorial standards.