Berman & Rabin, P.A., a law firm, is notifying individuals after discovering suspicious activity on its computer systems that included the encryption of certain files — a hallmark of a ransomware attack. The firm says an unknown actor gained access to its systems sometime between July 5 and July 8, 2024, and may have viewed or taken files during that window. It took until October 8, 2024 for the firm to confirm that some of the affected data included information tied to the people it’s now notifying, and the letters themselves went out in January 2025.
Because Berman & Rabin is a law firm, the information involved likely came from its work handling matters on behalf of clients rather than from a direct customer relationship with the people it’s contacting. The notice doesn’t spell out an overall total number of people affected, though it does mention that at least 352 residents of Rhode Island were among those notified, giving a partial sense of the letter’s reach across states.
What exactly did Berman & Rabin say was taken?
- Your name
- Additional personal information — the letter uses a placeholder for this section rather than listing the specific categories, so recipients should check their individual letter for the exact data elements named for them
If your copy of the letter lists specific items such as a Social Security number, driver’s license number, or financial account information, treat those categories as the ones that matter most for your protective steps below.
To help offset the risk, the firm is offering free credit monitoring and identity restoration services through IDX for either 12 or 24 months, depending on what’s indicated on your personal letter. You can enroll at https://response.idx.us/bermanrabin using the Enrollment Code printed at the top of your notice, and the firm asks that you do so by April 23, 2025.
Practical steps to lock down your information after this notice
- Activate the IDX credit monitoring and identity restoration membership before the April 23, 2025 deadline so it’s actually working on your behalf.
- Pull your free credit reports at annualcreditreport.com and look closely for accounts or inquiries you don’t recognize.
- Place a fraud alert or, for stronger protection, a credit freeze with Equifax, Experian, and TransUnion using the contact details included in your letter.
- Consider signing up for a service like Aura or LifeLock, which can alert you if your information appears elsewhere online or is being used to open new accounts.
- Watch your mail, email, and financial statements for anything unexpected over the next year or two, since the firm itself recommends staying alert for up to 24 months.
- If you do spot signs of misuse, file a report with local law enforcement and the FTC at identitytheft.gov — documentation helps if you need to dispute fraudulent charges later.
If you have questions about this incident, Berman & Rabin can be reached at 1-877-740-8195 (Monday through Friday, 9 a.m. to 9 p.m. Eastern Time) or by mail at 15280 Metcalf Ave., Overland Park, KS 66223.