Pennsylvania law firm Carpenter McCadden & Lane reports data breach affecting over 7,900 individuals
Learn More
Pennsylvania-based law firm Carpenter, McCadden & Lane (CML) is reporting a data breach that exposed sensitive information of over 7,900 individuals following a cyberattack that occurred in mid-April 2024. The breach went undetected for nearly eleven months and was discovered in late March 2025.
The Meow ransomware gang claimed responsibility for the breach in September 2024 and asserted they successfully exfiltrated approximately 100 gigabytes of confidential data from the law firm's networks. According to the Meow ransomware gang's claims, the compromised data potentially included:
- Employee data and records
- Client information and details
- Scanned payment documents
- Personal identification data
- Birth certificates
- Other confidential business files
CML has not confirmed the exposed data, stating that individuals' names and other unspecified information may have been exposed in the attack. The number of affected individuals is over 7,900 people.
The delay between the initial breach in April 2024 and its discovery in March 2025 raises concerns about the law firm's cybersecurity monitoring capabilities and incident detection procedures.
