Shillen Mackall & Seldon

The personal injury law firm Shillen Mackall & Seldon, which practices as Shillen Mackall Seldon Spicer & Fraas and operates the website promotingjustice.com, was listed as a victim by the DragonForce ransomware group on July 15, 2026. According to ransomware.live, a tracker that indexes ransomware group leak sites, DragonForce claimed responsibility for an attack on the firm that day, and the listing was discovered at 12:54 UTC on July 15. The firm, which represents personal injury clients primarily in Vermont, New Hampshire, and Florida, has been operating since 1980.

The investigation team estimates the breach exposed roughly 1.25 million rows of records. DragonForce, an extortion group that steals data from targets and threatens to publish it unless demands are met, reportedly posted a notice stating that the full leak would be published unless a company representative made contact.

Limited public reporting: As of September 25, 2026, detailed company notices or major news coverage for this listing were limited in sources reviewed. The facts below rely primarily on the indexed fields plus any secondary sources cited.

Breach Timeline

July 15, 2026: DragonForce listed Shillen Mackall & Seldon on its leak site and claimed responsibility for the attack, according to ransomware.live and DeXpose.

July 16, 2026: The incident was cataloged by Breachsense, which reported a leak size of 1.16 TB tied to the firm's domain.

What Information Was Compromised?

Our analysis found the following data types in this breach:

Names, associated with approximately 1,251,292 records

Street addresses, associated with approximately 980,134 records

Email addresses, associated with approximately 833,028 records

Phone numbers, associated with approximately 31,704 records

Social Security numbers, associated with approximately 1,322 records

Not every individual is affected by every type of data listed here.

Because the victim is a law firm, any exposed client records could also relate to legal matters such as accident claims or workers' compensation cases.

What Are the Potential Risks for Affected Individuals?

The most serious risk involves the Social Security numbers found in the breach. Even a small number of exposed SSNs can be used for identity theft, fraudulent tax filings, or opening accounts in someone else's name. Attackers often resell this data to other criminals.

The much larger sets of names, addresses, emails, and phone numbers carry different risks. This information is useful for targeted phishing, in which scammers send convincing emails or texts that reference real details to trick recipients into revealing passwords or payment information. Personal injury clients may be targeted with fake calls or messages about their legal cases. Because law firm matters often involve medical, insurance, and financial details, criminals may attempt to exploit that context.

What Should You Do If You Were Affected?

Place a free fraud alert or security freeze on your credit files with Equifax, Experian, and TransUnion. A freeze blocks most new credit accounts from being opened in your name.

Review your credit reports at annualcreditreport.com and dispute any accounts you do not recognize.

Watch for phishing. Be cautious with emails, texts, or calls referencing legal claims, settlements, or accident details, and never share passwords or financial information in response to unsolicited messages.

If your Social Security number was exposed, monitor your statements and consider an IRS Identity Protection PIN to prevent fraudulent tax returns.

Use unique passwords and enable two-factor authentication on important accounts.