BerksBar.org listed on Inc Ransom leak site

• Ransomware group: Inc Ransom
• Country: United States
• Sector: Professional Services
• Announcement date: March 9, 2025

The ransomware group known as Inc Ransom has officially listed BerksBar.org on its dedicated leak site. The threat actors claim to have successfully compromised the organization's systems and exfiltrated data during a cyberattack that allegedly took place on February 7, 2025. This announcement, published on March 9, 2025, serves as a public claim by the group regarding their intrusion into the organization's digital infrastructure.

The details of the alleged attack

According to the claims made by Inc Ransom, the group conducted a cyberattack against BerksBar.org, resulting in the unauthorized exfiltration of various data. The threat actors have published the organization's name on their leak platform to signal the success of their operation. In their announcement, the group provided visual samples of files to support their claims, showcasing the nature of the breach to the public.

While the group has shared screenshots to demonstrate their access, the specific volume of data taken, the total number of files, and the specific ransom amount demanded remain unknown. The group's use of a leak site is a common characteristic of modern ransomware operations, where attackers use the threat of public exposure to pressure victims into compliance.

Data and content involved in the claim

The content of the allegedly exfiltrated data has not been explicitly specified by the threat actors in terms of a comprehensive inventory. However, based on the visual samples and screenshots provided by the group, certain types of information appear to be present within the compromised directories.

• Administrative documents
• File directories

The listing does not name any specific categories of sensitive data beyond these observations, and the exact scope of the breach remains unconfirmed.

About BerksBar.org

The Berks County Bar Association is a legal bar association located in Reading, Pennsylvania. The organization is dedicated to promoting professional excellence, ensuring access to justice, and maintaining the integrity of the legal system. It focuses on advancing the standards of the legal profession through various services provided to its members and the community.

Risk assessment and industry implications

The claims made by Inc Ransom carry significant implications for the organization and its stakeholders. Because the target is a legal professional association, there is a heightened risk that the leaked data could include sensitive member information or documents that are subject to attorney-client privilege. Such a breach could potentially increase the risk of identity theft or the execution of targeted phishing attacks against the organization's members and stakeholders.

Furthermore, as a United States-based organization, this incident may trigger state-level data protection laws and potential regulatory inquiries. The use of double-extortion tactics by Inc Ransom is a notable factor in this assessment. In a double-extortion scenario, attackers not only encrypt an organization's data but also steal it, threatening to leak it publicly unless a ransom is paid. This tactic is designed to maximize leverage over the victim, as even if the organization can restore systems from backups, the threat of data exposure remains.

For organizations operating within the professional services sector, such incidents highlight the importance of robust cybersecurity frameworks. Common defensive steps for organizations include implementing multi-factor authentication, maintaining regular offline backups, and conducting regular security awareness training for employees to mitigate the risk of phishing. Additionally, monitoring for unauthorized data exfiltration and ensuring strict access controls can help reduce the impact of such targeted attacks.