Law Firm Davies, McFarland & Carroll LLC reports ransomware attack exposing data of 54,000 people
Learn More
Davies, McFarland & Carroll LLC, a Pittsburgh-based law firm is reporting a data breach caused by a ransomware attack that compromised information of more than 54,000 individuals. The attack was claimed by ransomware group known "lynx".
The breach occurred on May 19, 2025. The attack was discovered three days later on May 22, 2025. The investigation confirmed that an attackers had accessed and potentially stole information stored within its systems during the three-day window. The exposed data includes:
- Name
- Social Security number
- Address
- Date of birth
- Medical treatment or history
- Health insurance information
Davies, McFarland & Carroll sent out notification letters to affected individuals on November 24, 2025. The firm is providing impacted individuals with complimentary credit monitoring and identity theft protection services for a period of 12 to 24 months.
