On Dec. 28, 2022, alternative legal service provider Elevate reported that it a suffered data security breach earlier that year, which appeared to be a ransomware attack targeting the personally identifiable information of its clients—including Social Security numbers and medical data.

According to the sample data breach notice filed with the California Attorney General, the breach occurred between March 5 and March 15, 2022. As part of its investigation, the company determined that an “unknown actor” was able to access, as well as download, certain files on its systems.