Adnan Sundra & Low listed on Direwolf ransomware leak site

• Ransomware group: Direwolf
• Country: Malaysia
• Sector: Financial Services
• Announcement date: December 22, 2025

Direwolf claims data breach at Adnan Sundra & Low

The threat group known as Direwolf has listed the Malaysian law firm Adnan Sundra & Low on its leak site. According to the group's announcement, they claim to have successfully exfiltrated a significant amount of data from the firm's internal systems.

This type of activity is characteristic of modern ransomware operations, specifically the "double extortion" model. In these scenarios, threat actors do not merely encrypt an organization's files to disrupt operations; they also steal sensitive information to use as leverage. By threatening to publish stolen data on public leak sites, attackers aim to pressure victims into paying ransoms to prevent the exposure of confidential information, which can lead to severe legal, regulatory, and reputational consequences.

Details of the alleged attack

The threat actor known as Direwolf listed the organization Adnan Sundra & Low on their leak site on December 22, 2025. The group claims to have obtained and published a dataset totaling 488 GB from the firm's systems. The claimed attack date is also listed as December 22, 2025.

Information regarding this specific group remains limited in the public domain, making it difficult to ascertain their full tactics, techniques, and procedures. While the scale of the data is substantial, the group has not provided a specific ransom demand or further details regarding the nature of the breach beyond the initial listing.

Data involved in the leak

There is no detailed breakdown of the allegedly leaked data provided by the threat actor. However, the screenshot associated with the listing contains numerous numerical codes representing various data types.

• No specific data types were named in the listing.

About Adnan Sundra & Low

Adnan Sundra & Low is a Malaysia-based law firm specializing in corporate, banking, and finance law. The firm provides legal advisory services for various commercial and financial transactions.

Potential impact and risks

This alleged leak may pose a risk of exposing client confidentiality and sensitive commercial information held by the law firm. Given the firm's specialization in corporate and banking law, the exposure of such data could have significant implications for the parties involved in their legal transactions.

The organization could face legal liabilities under Malaysian data protection regulations, which may lead to administrative sanctions. Furthermore, the exposed data could potentially be utilized by third parties for identity theft or targeted phishing attacks. Beyond the immediate digital risks, the firm may experience reputational damage and a potential erosion of trust with its clients.

For organizations operating within the financial and legal sectors, such incidents highlight the critical importance of robust cybersecurity frameworks. Defensive measures typically include implementing multi-factor authentication, maintaining rigorous patch management schedules, and conducting regular employee training to recognize social engineering attempts. Additionally, maintaining offline, immutable backups and implementing strict data encryption protocols are standard industry practices used to mitigate the impact of both data theft and ransomware encryption.