Blanco & Etcheverry listed on gunra ransomware leak site

• Ransomware group: gunra
• Country: Uruguay
• Sector: Professional Services
• Announcement date: September 4, 2026

Uruguayan law firm targeted by gunra ransomware group

The Uruguayan-based law firm Blanco & Etcheverry has been listed on the leak site of the gunra ransomware group. On September 4, 2026, the threat actor announced the involvement of the institution, claiming that data belonging to the firm has been exfiltrated during the attack.

Ransomware attacks often follow a pattern of double extortion, where threat actors not only encrypt an organization's internal systems to disrupt operations but also steal sensitive information. By threatening to release this stolen data on public leak sites, attackers aim to exert maximum pressure on the victim to meet ransom demands. These leak sites serve as a public gallery for the group's victims, often used to shame organizations into compliance.

Details of the alleged incident

The announcement regarding Blanco & Etcheverry was made on September 4, 2026, which coincides with the date the group claims the attack took place. At this stage, the threat actor has not shared any further information regarding specific demands or the technical details of how the incident occurred. The listing remains a claim made by the group, and no additional context has been provided beyond the initial publication on their leak site.

Regarding the content of the breach, there is no information available regarding the nature of the allegedly exfiltrated data. The listing names no specific data types, and the group has not shared any screenshots or sample files to substantiate their claims on the relevant leak site.

About Blanco & Etcheverry

Blanco & Etcheverry is a law firm based in Uruguay. The company provides professional legal consulting and advocacy services across various legal fields.

Risk assessment and implications

This incident suggests that the firm may face the risk of exposure of sensitive legal documents containing client information. Such claims against law firms may create secondary risks regarding client confidentiality and attorney-client privilege. Because legal practices handle highly sensitive documentation, the potential impact of a data leak in this sector is significant.

Information about the gunra group remains limited, making it difficult to determine their specific tactics, techniques, or procedures. In the event that the data breach is confirmed, the institution may face legal obligations under Uruguayan data protection regulations. Furthermore, the possibility that the leaked data could be used for identity theft or targeted phishing attacks should be considered.

For organizations in the professional services sector, maintaining robust cybersecurity postures is essential to mitigate these risks. Common defensive steps include implementing multi-factor authentication, maintaining regular offline backups, and conducting regular security awareness training for staff to prevent phishing. Additionally, organizations should have a clear incident response plan and a deep understanding of their regional data protection compliance requirements to manage the legal and reputational fallout of a potential breach.