Kassin and Carrow Law Firm Breached by Lynx Ransomware Group
Ransomware Attack on Kassin & Carrow: A Closer Look at the Lynx Group's Latest Target
Kassin & Carrow, a law firm specializing in Social Security Disability and Supplemental Security Income (SSI) cases, has recently fallen victim to a ransomware attack allegedly orchestrated by the Lynx group. This incident highlights the ongoing threat posed by cybercriminals to organizations handling sensitive personal and financial data.
About Kassin & Carrow
Founded in 1992, Kassin & Carrow is a specialized law firm dedicated exclusively to Social Security Disability law. With offices in Edwardsville, Illinois, and St. Peters, Missouri, the firm serves clients across Southern Illinois and Eastern Missouri. Known for its personalized approach and contingency fee model, Kassin & Carrow has built a strong reputation in its field. The firm employs a team of experienced attorneys, including founding member Martin T. Carrow II, and has successfully represented thousands of clients over its three-decade history.
Details of the Attack
The Lynx ransomware group claims to have exfiltrated sensitive data from Kassin & Carrow, including contracts, financial records, and client information. The breach was discovered on January 20, 2025, and the attackers have threatened to release the stolen data publicly within a week. This attack underscores the vulnerabilities faced by small to medium-sized law firms, which often handle large volumes of sensitive information but may lack adequate cybersecurity measures.
Understanding the Lynx Ransomware Group
Lynx is a relatively new ransomware group that emerged in mid-2024, quickly gaining notoriety for its aggressive tactics and double extortion methods. The group primarily targets small and medium-sized businesses in North America and Europe. Lynx employs a ransomware-as-a-service model, allowing other cybercriminals to use its ransomware for a fee. The group is known for its use of advanced encryption algorithms and its strategy of exfiltrating data before encrypting files, increasing pressure on victims to pay the ransom.
Sources
See Halcyon in action
Interested in getting a demo?
Fill out the form to meet with a Halcyon Anti-Ransomware Expert!