Diehl & Cella Advogados Associados targeted by Inc Ransom

• Ransomware group: Inc Ransom
• Country: Brazil
• Sector: Professional Services
• Announcement date: January 30, 2026

The Inc Ransom ransomware group has listed the Brazilian law firm DIEHL & CELLA ADVOGADOS ASSOCIADOS on its leak site. The threat actors claim to have successfully exfiltrated a significant amount of data from the organization, signaling a potential breach of sensitive professional information.

The claimed attack and data exfiltration

According to an announcement made on January 30, 2026, the threat actor known as Inc Ransom claims to have targeted DIEHL & CELLA ADVOGADOS ASSOCIADOS. The group asserts that they have exfiltrated 100 GB of data from the firm's systems. The announcement suggests that the attackers are specifically targeting sensitive information related to the firm's commercial and financial operations for potential release.

Ransomware groups often utilize leak sites to pressure victims into paying ransoms. These sites serve as public galleries where stolen data is showcased to increase psychological pressure on the target organization. In many cases, these groups employ double-extortion tactics. This method involves not only encrypting the victim's files to disrupt operations but also stealing sensitive data beforehand. The threat of leaking this stolen information to the public or to regulators provides the attackers with additional leverage during negotiations.

The scope of the alleged data breach

The information allegedly stolen by the group is extensive and covers various aspects of the law firm's operations. The leak reportedly includes a wide range of confidential documents and sensitive records. Based on the group's claims, the following types of data are involved:

• Client data
• Financial data
• NDAs
• Corporate data

Beyond these specific categories, the group claims the stolen content includes confidential documents, operational records, business agreements, and financial databases containing transaction records. The presence of such diverse data types highlights the high-value nature of the target, as legal firms often act as repositories for the most sensitive information of their clients and business partners.

About Diehl & Cella Advogados Associados

Diehl & Cella Advogados Associados is a law firm based in Brazil. The company specializes in providing services in business law, tax law, and corporate consulting.

Impact assessment and industry implications

This breach may increase the risk of identity theft and fraud for the law firm's clients. Because the victim is a law firm, the breach of client confidentiality could lead to significant reputational damage. Furthermore, given the LGPD regulations in Brazil, the firm may face legal sanctions regarding its data protection obligations.

As Inc Ransom employs double-extortion tactics, there is a possibility that the exfiltrated data could be utilized for secondary attacks or targeted phishing campaigns. Such campaigns often use the stolen context to craft highly convincing messages to further exploit the victims or their clients. While the group has been active since mid-2023, it is assessed that such attacks may also negatively impact supply chain security, as a breach at a professional services firm can provide a gateway to the clients they serve.

For organizations in the professional services sector, maintaining robust cybersecurity postures is critical. Defensive steps typically include implementing multi-factor authentication, maintaining regular offline backups, and conducting regular employee training to recognize phishing attempts. Additionally, adhering to regional data protection regulations and implementing strict access controls can help mitigate the impact of such incidents.