More than 42,000 people had their information exposed during a ransomware attack on a California law firm that provides free services to those in need.

The Law Foundation of Silicon Valley notified regulators in California and Maine this week that the February ransomware attack on their offices resulted in the leak of Social Security numbers and other personal information.

The breach affected both clients and staff members. The law firm said it has about 90 attorneys, social workers, staff, and volunteers while helping about 10,000 people each year.

The firm, which has existed for nearly 50 years, posted a message on its website last week about the incident, confirming that they were the “victim of a sophisticated ransomware attack.”

“While operations were back up and running when offices reopened from the [Presidents Day] holiday weekend, data on one server was later discovered to have been compromised. The Law Foundation immediately engaged cybersecurity specialists who conducted an extensive forensic investigation,” they said.

“The investigation revealed that certain information within the Law Foundation’s system was unlawfully accessed and that the breach compromised the personal information of more than 40,000 clients, staff, and others.”

Information accessed includes: Social Security numbers, medical records, immigration numbers, financial data, driver’s license numbers, financial account/payment card information, passport/government identification, taxpayer-identification numbers, dates of birth and digital signatures.

The investigation into the incident ended on June 1 and the law firm spent another 30 days looking for addresses and contact information for victims, who are now being offered 12 months of identity protection services and identity theft insurance.

The victims involved included both adults and minors.

“We are in the business of helping people with important and sensitive life issues. The breach impacts the core of our nonprofit mission to help low-income individuals and families with serious issues to improve their lives. We have partnered with experienced vendors to notify and assist those who are impacted,” said Alison Brunner, CEO of…