Brown & Brown PC data allegedly leaked by DragonForce

• Ransomware group: DragonForce
• Country: United States
• Sector: Professional Services
• Announcement date: June 23, 2025

DragonForce claims to have stolen data from Brown & Brown PC

The ransomware group known as DragonForce has listed data allegedly belonging to the law firm Brown & Brown PC on its leak site. The announcement, which appeared on June 23, 2025, suggests a significant data breach involving the professional services firm. According to the claims made by the threat actor, the breach occurred on the same day the information was posted to their platform.

Ransomware attacks often involve a tactic known as double extortion. In this model, attackers do not merely encrypt an organization's files to disrupt operations; they also exfiltrate sensitive data before the encryption process begins. The goal is to pressure the victim into paying a ransom by threatening to publish the stolen information on a public leak site. This method increases the pressure on the target, as the loss of data confidentiality can be just as damaging as the loss of data availability.

Details of the alleged leak

The DragonForce group claims that the volume of data compromised in this incident amounts to approximately 103.44 GB. While the group has provided the total size of the alleged leak, they have not provided specific details regarding the exact content or the specific types of files contained within the dataset. Despite this lack of granular detail, the group's announcement includes claims that the information belonging to thousands of the firm's clients may have been compromised.

The listing identifies the following as being affected by the alleged breach:

• Customer data

Because the group has not specified the nature of the files, it remains unclear whether the data consists of legal documents, personal identification, or financial records. However, the sheer volume of the data and the claim that thousands of clients are involved suggest a wide-reaching impact.

About Brown & Brown PC

Brown & Brown, P.C. is a law firm that provides comprehensive legal services. The organization specializes in providing dedicated attention to clients who are navigating complex legal environments. As a professional services entity operating within the legal sector, the firm handles sensitive information that is often subject to strict confidentiality requirements.

Potential risks and industry implications

This alleged leak may carry the risk of exposing sensitive information protected under attorney-client privilege, given that the entity is a law firm. The exposure of such data can lead to severe consequences for both the firm and its clients. For the clients, there is a possibility that they could be exposed to identity theft or targeted phishing attacks if their personal information is used by malicious actors.

Furthermore, as a US-based entity, data breach notification obligations under relevant state laws and federal regulations may arise. Organizations in the professional services sector must be prepared to navigate these complex regulatory landscapes following a breach. There are also significant risks to the institution's operational continuity and reputation management that may emerge from such an incident.

It is worth noting that the DragonForce group reportedly follows a model of providing infrastructure to affiliates. This means that the possibility that such attacks may have been carried out by different actors using the group's tools should be considered. In modern cybercrime ecosystems, the separation between the developers of ransomware infrastructure and the affiliates who execute the actual attacks can make attribution and investigation more complex.

To defend against such threats, organizations typically implement multi-layered security strategies. This includes maintaining robust backup solutions, implementing strict access controls, and conducting regular employee training to recognize phishing attempts. Monitoring for unauthorized data exfiltration is also a critical component of a modern defensive posture to mitigate the impact of double extortion tactics.