Schlenker and Cantwell, P.A. Listed by Deadlock Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

Ransomware operations continue to target professional service firms that hold sensitive client records, with groups publicly claiming victims through leak sites as a pressure tactic. On July 10, 2026, the Deadlock ransomware group listed Schlenker and Cantwell, P.A. on its site, stating that internal files had been taken during a ransomware attack. The number of individuals affected remains unknown, and no further details about the scope or confirmation of the data have been made public.

What happened

The incident centers on a listing posted by the Deadlock group on July 10, 2026. The group claims that internal files were exfiltrated from Schlenker and Cantwell, P.A. during a ransomware attack. No information has been released about the timing of the intrusion itself, the volume of data involved, or whether any files were later published. The firm has not issued a public statement confirming or disputing the claim.

The group behind it: Deadlock

Deadlock is a ransomware operation that has appeared in public reporting since 2024. Like other groups in this category, it typically gains access through common entry points such as remote desktop services or stolen credentials, deploys encryption, and then lists selected victims on a dedicated leak site to encourage payment. The group’s listings are presented as claims rather than independently verified events; in this case, the listing of Schlenker and Cantwell, P.A. remains an assertion made by the actors themselves.

Schlenker and Cantwell, P.A. and its sector

Schlenker and Cantwell, P.A. is a certified public accounting firm based in the United States. Its services include tax preparation and planning, auditing and assurance, bookkeeping, payroll processing, financial reporting, consulting, and estate and trust management. Firms of this type routinely process detailed financial and personal information belonging to individuals and businesses, making them attractive targets for actors seeking monetizable data.

The information in question

The only detail provided is that internal files were allegedly exfiltrated. The precise categories of data contained in those files have not been disclosed. Accounting practices routinely maintain client tax returns, financial statements, payroll records, and identifying information, but it is not confirmed whether any of these specific categories were among the files referenced in the listing.

What's at stake

For individuals whose records are held by the firm, exposure of internal files could increase the chance of identity misuse or financial fraud if the material contains personal identifiers or account details. For the organization, the event adds to the operational and reputational pressures already associated with ransomware incidents in the professional services sector, where client trust depends on the protection of confidential records.

What to do if you're exposed

Individuals who believe their information may be held by Schlenker and Cantwell, P.A. should monitor their financial accounts and tax filings for unusual activity. They can also place fraud alerts with credit bureaus and review any notices issued directly by the firm. Readers can run a free exposure scan of their email address to check whether their information has appeared in known breach data.

• Review bank and credit card statements regularly for unrecognized transactions.
• Request a free credit report from each of the three major bureaus.
• Consider a credit freeze if no recent credit applications are planned.
• Watch for official communications from the firm or tax authorities.

AICompiled with AI assistance from public sources and published under our editorial standards.