A ransomware group calling itself DragonForce claims to have targeted Norwood Law Firm, with the claim appearing on the group’s own leak-site listing on or around September 4, 2026. This listing was tracked by ransomware.live, a security research platform that monitors ransomware groups’ public leak sites. At this time, the claim has not been independently verified, and Norwood Law Firm has not issued any public confirmation of an incident.
What we know — and don’t
- A group calling itself DragonForce listed Norwood Law Firm on its leak site with a claimed date of September 4, 2026.
- Norwood Law Firm operates in the legal sector, which often handles sensitive client and case-related information.
- The specific types of data the group claims to have obtained have not been disclosed or confirmed by any party.
- Neither Norwood Law Firm nor any regulatory body has confirmed that a breach occurred.
- This claim originates solely from the ransomware group’s own leak-site posting, as tracked by ransomware.live.
What should you do if you have an account with this company?
- Change your password for any account associated with Norwood Law Firm, and avoid reusing that password elsewhere.
- Enable two-factor authentication (2FA) wherever it is offered, especially on email and financial accounts.
- Be cautious of unexpected emails, calls, or texts claiming to be from Norwood Law Firm or related parties, particularly those asking for personal information or payment.
- Monitor your financial statements and credit reports for any unfamiliar activity.
- Consider using an identity monitoring service like a service like Aura or LifeLock to help detect misuse of your personal information early.
- Keep records of any communications from the firm regarding this claim in case further information becomes available.
BreachLetter will update this page if Norwood Law Firm confirms the incident or if the matter is officially reported to regulators.