WHEALE LAW
Injury & Death Attorney
Free Consultation. No Retainer.
No Fees Unless You Win.
(678) 580-8936
My Items
Personal Injury Attorney
Wheale Law Group
Ransomware Updates
Last Updated: 10/08/2025
What Happened
On September 27, 2025, Wheale Law Firm identified and immediately interrupted a ransomware attack that was in the process of encrypting old/closed client files. The records are kept electronically on an onsite server, unconnected to the cloud. Only a small number of individual files experienced encryption, and it is believed that there was no data breached in the attack. Out of an abundance of caution, we are notifying all current and past clients of the incident.
What Information Was Involved
Typical client files contain copies of a client’s name, address, birthday, and social security number. In addition, they contain protected health information contained in medical records that we may have had on file.
What We Are Doing
The incident was immediately reported to the Federal Bureau of Investigations (FBI) and local law enforcement. The affected devices were immediately isolated and transferred to IT specialists for review and repair. The IT specialist’s expressed belief is that no data was breached in the attack. On September 29, 2025, the Firm’s local internet provider was notified, and from the limited data available at the time of the call, there was no evidence of abnormal data usage to suggest a breach.
We are continuing to work to improve security and mitigate the risks associated with this incident. In the days immediately following the incident, we upgraded our local systems’ endpoint security software systems and detection processes; upgraded our Wi-Fi router and firewall systems; employed a managed IT security services contractor to provide ongoing security and back-up systems; replaced all passwords with all third-party service providers; and transferred and closed all financial accounts including the protected interest on lawyer’s trust account (IOLTA).
For current and former clients that were potentially affected, we are offering identity theft protection services through IDX, the data breach and recovery services expert. IDX identity protection services include: 12 months of credit and CyberScan monitoring, a $1,000,000 insurance reimbursement policy, and fully managed id theft recovery services. With this protection, IDX will help you resolve issues if your identity is compromised.
What You Can Do
We encourage all current, former, or potential clients that we have contacted directly to to reach out to IDX with any questions and to enroll in the free identity protection services. The information was included in the mailed and emailed letters.
Again, at this time, there is no evidence that your information has been breached or misused. However, we encourage you to take full advantage of this service offering. IDX representatives have been fully versed on the incident and can answer questions or concerns you may have regarding protection of your personal information.