Real Results for Chicago Businesses.
Documented Proof & Illustrative Scenarios
These case studies are based on real, publicly documented incidents and illustrative scenarios.
See exactly how we protect operations, secure sensitive data, and eliminate cyber threats for businesses across the Midwest.
ACCOUNTING FIRM
When Tax Season Becomes Open Season
What Happened
In April 2024, Legacy Professionals LLP, an accounting firm based in Westchester, Illinois, just outside Chicago, was breached by the LockBit 3.0 ransomware group. Over two days, the attackers moved through the firm’s network and quietly copied files before anyone noticed. Those files held names, Social Security numbers, driver’s license numbers, and medical and health insurance details for 216,752 people. That August, the criminals published the stolen data on the dark web. The firm did not finish notifying affected individuals until early 2025, and it now faces class-action lawsuits over the breach and the delay.
PROPERTY MANAGEMENT
38 Gigabytes of Tenant Trust, Gone in a Day
What Happened
In December 2024, Tri County Property Management, based in Sandwich, Illinois, was breached, with attackers removing roughly 38 gigabytes of data from its systems. Property managers sit on exactly what criminals want: tenant Social Security numbers, bank account and payment records, lease files, and applicant background data. The same pattern played out at Income Property Management, where a single intrusion exposed driver’s licenses, Social Security numbers, dates of birth, medical details, and even passport numbers, and the firm did not notify affected people until more than a year later.
CONSTRUCTION & CONTRACTING
Four Invoices, $445,000, One Spoofed Vendor
What Happened
In 2024, attackers impersonated a vendor working on the Town of Arlington, Massachusetts high school building project. Using phishing, spoofed email, and a compromised account, they inserted themselves into the payment process and supplied new wiring instructions. Four monthly payments totaling $445,945 went to the criminals before the real vendor reported, in February, that it had never been paid. Investigators later found additional interception attempts on the same project totaling roughly $5 million. The town’s bank was able to recover just $3,308, about six percent of the loss.
LAW FIRM
Six Attorneys. One Phishing Email. A Class Action.
What Happened
On March 9, 2024, Wacks Law Group, a six-attorney estate planning firm in Whippany, New Jersey, discovered suspicious activity on its network. The Qilin ransomware group soon claimed responsibility, announcing on its dark web leak site that it had stolen and encrypted client data. The exposed information included names, Social Security numbers, driver’s license numbers, confidential documents, and non-disclosure agreements. The firm did not notify affected clients until August, roughly five months later. That delay became the centerpiece of a class-action lawsuit alleging the gap gave criminals a head start on the stolen data.
DENTAL & MEDICAL PRACTICE
The Patient Who Discovered the Breach
What Happened
A patient kept calling Arlington Westend Dental in Indiana to ask for copies of their x-rays. The practice finally admitted it no longer had them. Its systems had been hacked, and the records were gone. That single patient complaint triggered an Indiana Attorney General investigation. It confirmed a ransomware attack had encrypted every record on the affected server, complete with a ransom note, and uncovered serious HIPAA compliance failures. The case settled for $350,000. The practice did not discover its own breach. A patient did.
ACCOUNTING FIRM
Saved from Ransomware During Tax Season
What Happened
A 25-person CPA firm was targeted by a sophisticated ransomware attack in mid-March. Our endpoint protection isolated the threat in seconds, preventing any data loss or downtime during their busiest month.
PROPERTY MANAGEMENT
Secured $50M+ in Monthly Transactions
What Happened
After a near-miss with email compromise, a regional property manager brought us in. We implemented strict access controls, dark web monitoring, and employee training to lock down their financial operations.
CONSTRUCTION COMPANY
Stopped $150k Wire Fraud Attempt
What Happened
Hackers intercepted an email thread and sent fake wiring instructions for a materials purchase. Our email security filters flagged the anomaly and blocked the transaction before the funds were transferred.
Want these kinds of results for your business?
Find out exactly where your security stands today with our comprehensive, zero-pressure risk assessment.
Book Free AssessmentReady to Protect Your Business?
Don't wait to become a case study. Find out where your business stands today with a free, no pressure risk assessment.
Get My Free Security Assessment