The Akira ransomware group claimed responsibility for a data breach at the Elia Law Firm in May 2026. The group threatened to publish approximately 100 GB of data, including employee personal information, passport data, driver's licenses, SSNs, death and birth certificates, financial information, payment details, legal files, court and hearing records, and police reports. Medical data was not explicitly mentioned.
As of the current reporting, the number of affected individuals and the specific states affected have not been publicly confirmed by the company or regulators. No official breach notification letter or company statement has been located. There are no identified state Attorney General filings, class action lawsuits, or multidistrict litigation related to this incident. The firm does not appear to be publicly traded, and a reliable revenue estimate is not available. There is no evidence to suggest this was a vendor or third-party breach.
It is important to note that details about data breaches can emerge over time, and official notifications may be delayed.