The law firm Berman & Rabin is notifying around 152,000 individuals of a data breach following a ransomware attack that occurred in July 2024. The breach exposed sensitive personal information, prompting the company to take precautionary measures to protect those affected.
Headquartered in Overland Park, Kansas, Berman & Rabin is a law firm that focuses on debt collection and creditor rights, providing legal services to financial institutions, businesses, and lenders. With over 140 employees, the firm has built a reputation for handling creditor-specific legal matters.
The incident was discovered on July 8, 2024, when the law firm detected suspicious activity within its systems, including the encryption of certain data. An investigation revealed that attackers had accessed the company’s network between July 5 and July 8, during which time they exfiltrated data from several systems.
By October, it became clear that the compromised data included names, Social Security numbers, and financial information. Although there is no confirmed misuse of the stolen data, Berman & Rabin is notifying affected individuals as a cautionary step.
In response to the breach, the law firm has begun sending written notifications to approximately 151,944 individuals.
To help those potentially impacted, Berman & Rabin is giving out a year of free credit monitoring and identity restoration services. The company has also provided instructions on setting fraud alerts to ensure safety for the affected people and security freezes on credit files. Relevant authorities and major credit reporting agencies have been informed about the incident as well.
While details about the ransomware used in the attack remain unknown, no ransomware group has claimed responsibility for the breach. This situation could indicate that a ransom was paid, though the affected company has not commented on this possibility.
As cybersecurity threats continue to grow, incidents like this must remind organisations to strengthen their security measures. Protecting sensitive data is essential, particularly for companies handling large amounts of personal information.
Authorities are investigating the breach further, and Berman & Rabin has yet to disclose whether they will implement additional security enhancements. Affected individuals are advised to stay vigilant by monitoring their credit reports and taking advantage of the services offered by the law firm.
