company allegedly breached as reported by Aurora ransomware with details: Law Offices of Michael A. Freedman, P.A. (maflaw.com). The exfiltrated corpus is 579 GB used / 143 GB at base rase / 196,701 files / 19,231 directories, dated as recently as a year-2026-in-progress node matter.
What this means for a plaintiffs' PI firm of ~25 staff:
656 client-matter folders organised across eight yearly parents from June 2019 through 2026-in-progress. Per-client medical records, HIPAA authorisations, police reports, resolution releases, IOLTA distribution sheets, retainer agreements, and treating-provider correspondence.
Two staff Outlook archives at 2.1 gigabit each, plus a 505 MB Outlook backup, plus 27 enumerated .pst files years of attorneyclient privileged correspondence, settlement strategy, opposing-counsel comms.
The complete Sage ACT. Pro v18 contact universe the live database plus eight historical energy backups going endorse to 2013 plus a 9.3 mb plaintext export (ACT!-Contacts.txt) that any text editor can open. Estimated 5,00012,000 contacts.
The firm's captain credential vault in a news document called Woodywoody78!.docx (the filename is itself the vault password). Plaintext credentials for M&T cant multi-identity business + commercial accounts (with electronic-payment-approval authority), bank of America, Paychex, QuickBooks, and the firm's federal EIN. Plus the senior partner's phone-unlock PIN.
A staff browser-exported password CSV (32 plaintext credentials) including the M365 tenant, the slack tenant, hospital portals (MedStar, GBMC, Allstate secure mail), MoveDocs, ChartRequest, MSHC Legal portal plus residual credentials from prior employers SLF Law and Bailey Law, creating cross-firm contamination liability.
The Universal Licensing / Freedman Consulting invention-promotion operation a second line of business under the same EIN, with hundreds of inventor folders. Per-inventor unpublished conception disclosures, Internet Presentation of Invention decks, NDAs, exclusive Patent license concord drafts, patent-art renderings, and per-managed-mailbox client-company passwords.
A criminal-defense sub-practice (SLF criminal out of Janice's working folder) with retainer agreements and per-client court documents, carrying 6th-Amendment-attorneyclient uplift on the privileged-track scoring.
An Axon evidence.com MPIA-released body-worn-camera bundle (449 MB total; a 448 MB clip from the 2020-12-20 Park Baltimore incident).