Dunn and Dunn Listed by insomnia Ransomware Group

On January 8, 2026, the Boston-based law firm Dunn and Dunn appeared on the leak site of the insomnia ransomware group. The firm, founded in 1928 and specializing in medical malpractice defense, long-term care defense, and general liability defense for healthcare professionals, had internal files exfiltrated during a ransomware attack. While the exact number of individuals whose data may have been exposed remains unknown, any client, employee, or healthcare provider whose records passed through the firm could be affected.

What's Publicly Reported from Reporting

Public reporting indicates that insomnia posted Dunn and Dunn to its leak site on January 8, 2026. The data consists of internal files obtained after the group deployed ransomware against the firm’s systems. No Reported Details have surfaced yet about the precise volume or specific categories of information stolen, such as names, addresses, medical records, or financial details. The firm has not issued a public statement detailing the scope as of the latest available information.

Why This Matters for You and Your Family

When a law firm like Dunn and Dunn is breached, the information at risk often includes sensitive details about real people — clients who sought legal help for medical issues, their family members, and the healthcare professionals they interacted with. If your medical malpractice case, long-term care dispute, or liability matter was handled by the firm, your personal information may now sit in a ransomware group’s hands. That exposure can lead to identity theft, insurance fraud, or targeted scams that directly affect your finances and peace of mind. For families, one breach can ripple outward: a parent’s medical-legal file might contain a child’s information as well.

The Doxxing and Identity-Chain Implications

Ransomware leaks rarely stop at the initial data set. Attackers or opportunistic criminals frequently combine stolen internal files with other publicly available information to build detailed profiles. A single email address or phone number from the Dunn and Dunn files can be linked to your social media accounts, your children’s gaming usernames, or your spouse’s employer records. These identity chains make it easier for criminals to impersonate you, hijack accounts, or launch doxxing campaigns that publish your home address and family details online. Credential leaks of this nature often cascade into gaming account takeovers, especially when family members reuse passwords or security questions tied to the same household data.

Insomnia Group’s Known Track Record

Public reporting attributes the attack to the insomnia ransomware group. The group emerged in recent years and has targeted organizations across multiple sectors by gaining initial access through common vectors such as phishing or unpatched software, exfiltrating data before encrypting systems, and then publishing samples on leak sites when victims do not pay. Their typical playbook combines data theft with extortion pressure, releasing portions of stolen files to demonstrate capability and accelerate negotiations. Past victims have included companies whose internal documents contained employee and customer records, following a pattern similar to the Dunn and Dunn incident.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, handles, and real-world identity so you can see exactly what the Dunn and Dunn files could connect to.
• Rotate any password you used at Dunn and Dunn anywhere else it appears, then enable two-factor authentication through an authenticator app rather than text messages.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next leak exposing you or your family is caught and addressed in hours instead of months.
• Cover the entire household with DoxxScan family protection, which extends to dependents and children’s gaming accounts that often chain back to the same addresses and credentials.
• Let remediation specialists handle takedown requests for any exposed personal information across data brokers and leak sites on your behalf.

The Dunn and Dunn breach underscores a simple reality: your family’s sensitive legal and medical details can end up in criminal hands through no fault of your own. Taking concrete steps now limits what attackers can build from this leak and any future ones. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping that connects online handles to real identities, and hands-on remediation by specialists who manage takedowns for you — including protection for your family and children’s gaming accounts that frequently become targets when credential leaks occur.