On December 22, 2025, Swartz Campbell LLC, a Pennsylvania-based law firm founded in 1921, appeared on the leak site of the interlock ransomware group. The firm, which maintains multiple offices along the East Coast and handles class-action, employment, medical-malpractice, and divorce cases, is claimed to have had internal files exfiltrated during a ransomware attack. Although the exact number of individuals whose information was taken remains unknown, anyone who has worked with the firm, been represented by it, or had their records stored in its systems could be affected.
Watch Swartz Campbell
Get alerted the next time Swartz Campbell files a breach with any US regulator — the filing, dated and sourced. A free single-company slice of Signals; no account needed.
We’ll email you only about Swartz Campbell’s future breach filings and how to watch a whole vendor list — not general marketing. Unsubscribe any time.
Watching your whole vendor list (50 to 500 companies, by tier) is GalaxyWarden Signals.
What Public Reporting Shows
Public reporting indicates that interlock posted Swartz Campbell to its leak site on December 22, 2025. The data consists of internal files exfiltrated after the group deployed ransomware against the firm’s network. No precise count of exposed records has been released, and the precise systems compromised have not been detailed beyond the broad description of internal documents. The firm’s headquarters are in Philadelphia, with additional locations serving clients across the East Coast.
Why This Matters for You and Your Family
When a law firm loses control of its internal files, the people whose sensitive personal information sits inside those files suddenly face new risks. If you or anyone in your family has used Swartz Campbell for divorce proceedings, employment disputes, medical-malpractice claims, or any class-action matter, documents containing names, addresses, dates of birth, Social Security numbers, medical records, financial details, or case notes may now be in the hands of criminals. That information does not lose its value after the initial breach; it can be sold, traded, or used months or years later to open fraudulent accounts, file fake tax returns, or impersonate you in official correspondence. Your family’s exposure is not limited to the primary client—spouses, children, and other dependents named in case files are equally at risk.
The Doxxing and Identity-Chain Implications
Ransomware groups rarely stop at dumping one set of files. Once internal documents leave a law firm, attackers or buyers can map relationships between names, addresses, phone numbers, email accounts, and online handles. A single leaked divorce filing might list children’s names and school information; an employment case might contain work email addresses that lead to corporate logins. These connections create doxxing chains that turn one breach into repeated targeting. Credential leaks of this kind frequently cascade into account takeovers on email, banking, and especially gaming platforms. Children’s gaming accounts tied to a parent’s email or home address become easy follow-on targets because the same passwords or recovery details often appear in the stolen files.