Schlam Stone & Dolan LLP Listed by anubis Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On March 27, 2026, the ransomware group anubis listed Schlam Stone & Dolan LLP on its leak site, claiming to have exfiltrated internal files during a ransomware attack. The number of people whose data may be involved is not known, and no further details about the scope or contents of the material have been made public. This incident matters because the firm works with government institutions and large corporate clients, where even limited exposure of internal records can affect ongoing legal matters and the individuals connected to them.

Breaking down the breach

The only confirmed information is the March 27, 2026 listing by anubis and the statement that internal files were taken. The number of records, the exact timing of the intrusion, and the method used to gain access have not been disclosed. No confirmation from the firm or independent verification of the data’s release has been reported.

Who is anubis?

Anubis is a ransomware group that has conducted operations against organizations in multiple sectors. Like other groups of its kind, it typically combines file encryption with the theft of data, then lists victims on a leak site to pressure payment. Public records of its activity show repeated use of this double-extortion approach, though the group has not issued additional public statements about this specific listing beyond the initial claim.

Schlam Stone & Dolan LLP and its sector

Schlam Stone & Dolan LLP is a law firm whose clients include government bodies and Fortune 500 companies. Law firms in this category routinely store case files, client correspondence, financial records, and regulatory documents. A breach at such an organization is consequential because the material often relates to disputes, transactions, or compliance matters that involve third parties whose information appears in the records.

The information in question

The listing refers only to “internal files exfiltrated in ransomware attack.” No specific categories of data have been named. Organizations of this type commonly hold client names, addresses, identification numbers, privileged communications, and details of legal proceedings. The precise contents of the exfiltrated material remain unconfirmed.

The real-world impact

Individuals connected to the firm’s matters face the possibility that personal or sensitive details could appear in unauthorized hands. For the organization, the incident adds to the operational and reputational costs already associated with responding to ransomware activity. Both outcomes depend on what the files actually contain and whether the material is further distributed.

Were you affected?

Begin by contacting Schlam Stone & Dolan LLP directly for any notifications the firm may issue. Review financial and legal accounts for unusual activity. Consider placing fraud alerts with credit agencies if personal identifiers are likely present in the records.

• Monitor official statements from the firm for updates on the incident.
• Run a free exposure scan of your email address against known breach data.
• Change passwords for any accounts linked to the firm and enable multi-factor authentication where available.

AICompiled with AI assistance from public sources and published under our editorial standards.