Asmar Schor & McKenna listed on Dragonforce leak site

• Ransomware group: Dragonforce
• Country: United States
• Sector: Professional Services
• Announcement date: April 3, 2026

Dragonforce claims data breach at Asmar Schor & McKenna

The threat actor known as Dragonforce has listed the law firm Asmar Schor & McKenna on its leak site, alleging a significant data breach. According to the announcement, the group claims to have obtained a dataset totaling 444.05 GB from the firm's systems. This incident is associated with a cyber attack that was reported to have occurred on April 3, 2026.

Details of the alleged incident

The claim made by Dragonforce suggests a successful exfiltration of a substantial volume of information. While the group has published the organization's name on their platform, no specific details regarding the nature of the leaked data have been provided. The announcement was made on April 3, 2026, coinciding with the date the attack was claimed to have taken place.

In many modern ransomware campaigns, threat actors employ a strategy known as double extortion. In this model, attackers do not merely encrypt an organization's files to disrupt operations; they also steal sensitive data before the encryption process begins. The threat of leaking this stolen information on a public leak site serves as additional leverage to pressure the victim into paying a ransom. The presence of a leak site listing often indicates that the attackers have moved from the initial intrusion phase to the extortion phase of their operation.

Data and potential content

The listing names no specific data types that were allegedly stolen. However, given the professional nature of the firm's operations, the stolen information may include sensitive legal documents and client information. The lack of specific details regarding the file types or the exact contents of the 444.05 GB dataset leaves the full scope of the breach unconfirmed.

About Asmar Schor & McKenna

Asmar, Schor & McKenna is a law firm specializing in construction law, government contracts, commercial real estate transactions, and corporate law. They provide legal counsel to a diverse client base ranging from Fortune 100 companies to international contractors.

Risk assessment and industry implications

This alleged leak may pose privacy risks for the firm's clients, including Fortune 100 companies and various contractors. Given the nature of law firms, the leaked data could contain sensitive trade secrets, contracts, and personal information, which may lead to legal repercussions under US state laws and relevant regulations. Secondary risks may include the potential use of leaked information for identity theft or targeted phishing attacks.

The structure of the Dragonforce group, which provides infrastructure to affiliates, may facilitate the misuse of the data by various actors. When ransomware groups operate as a service, providing the necessary technical framework for different affiliates, the risk of data being redistributed or sold to multiple malicious actors increases.

For organizations operating in the professional services sector, particularly law firms, maintaining robust cybersecurity postures is critical. Common defensive steps for organizations include implementing multi-factor authentication (MFA) across all remote access points, maintaining offline and immutable backups to recover from encryption, and conducting regular employee training to recognize phishing attempts. Furthermore, implementing strict access controls and monitoring for unusual data exfiltration patterns can help mitigate the impact of such incidents.