AnchorsGordon listed on dragonforce ransomware leak site

• Ransomware group: dragonforce
• Country: United States
• Sector: Professional Services
• Announcement date: April 7, 2026

Florida law firm targeted by dragonforce ransomware group

The Florida-based law firm AnchorsGordon has been listed on the leak site of the ransomware group known as dragonforce. According to an announcement made on April 7, 2026, the threat actor claims to have successfully compromised the firm's network and subsequently leaked a significant volume of data.

The claims made by dragonforce

The threat actor known as dragonforce has published an announcement claiming to have compromised data belonging to AnchorsGordon. In the post, the group states that they have obtained approximately 2.16 TB of data, which they allege was taken directly from the firm's network. This claim was made on the same day the announcement was posted, April 7, 2026.

The dragonforce group is a known entity in the cyber threat landscape, having emerged in 2023. The group is recognized for operating a specific business model where they provide specialized infrastructure to various affiliates, allowing them to carry out coordinated attacks. This model often involves double extortion, a tactic where attackers not only encrypt an organization's data to disrupt operations but also steal sensitive information to use as leverage for ransom demands.

Details regarding the leaked data

While the group has claimed a massive data theft, the specific content of the leaked data has not been disclosed by the attackers.

The listing names no specific data types in a structured list, though the scale of the breach is reported to be 2.16 TB.

About AnchorsGordon

AnchorsGordon is a law firm based in Northwest Florida. The firm specializes in various legal fields, including commercial litigation, corporate law, real estate law, and labor and employment law. With decades of experience, the firm provides comprehensive legal consulting and representation services to its clients within the region.

Implications and potential risks

As a law firm, the leak may have negative implications for client confidentiality and attorney-client privilege. Because the firm is based in the United States, the breach may lead to legal consequences under state laws and federal data protection regulations. The publication of such data could increase the risk of identity theft and targeted phishing attacks against the firm's clients.

Furthermore, the group's model of providing infrastructure to affiliates suggests that the leaked data may be utilized by various actors in secondary attacks. This means that even if the initial ransom demand is not met, the stolen information can be sold or used by different criminal entities to target the victims again.

For organizations operating in the professional services sector, such incidents highlight the critical importance of robust cybersecurity frameworks. Common defensive steps for organizations include implementing multi-factor authentication, maintaining regular offline backups, and conducting regular security awareness training for employees to recognize phishing attempts. Additionally, maintaining strict access controls and monitoring network traffic for unusual activity can help mitigate the impact of such breaches.