Dill Dill Carr Stonbraker & Hutchings listed on Genesis ransomware leak site

• Ransomware group: Genesis
• Country: United States
• Sector: Professional Services
• Announcement date: December 9, 2025

The threat actor known as Genesis has claimed responsibility for a major data breach targeting the Denver-based law firm Dill Dill Carr Stonbraker & Hutchings. According to an announcement posted on the group's leak site on December 9, 2025, the attackers claim to have exfiltrated a massive volume of sensitive information, totaling approximately 4.5 TB of data.

Details of the alleged attack

According to the claims made by the Genesis group, the cyberattack against the law firm allegedly occurred on December 5, 2025. The group has published the firm's name on its dedicated leak site, signaling a potential double extortion tactic. In such scenarios, threat actors typically steal sensitive data before encrypting systems, using the threat of leaking the stolen information to pressure the victim into paying a ransom.

The Genesis group has provided specific justifications for their public announcement. They claim that the negotiation process with the law firm has been slow and that the firm has failed to reach a successful resolution with its insurer. The group's announcement includes various categories of compromised files and even lists contact details for employees of the firm, further increasing the potential impact of the leak.

Alleged data types and content

The volume of data claimed by the attackers is significant, and the content described suggests a high level of sensitivity. The group alleges that the stolen information includes a wide array of confidential documents and personal records. The categories of data reportedly compromised include:

• Client personal data
• Medical records
• Criminal records
• Financial data
• Litigation data
• Confidential agreements
• Email archives
• Employee contact information

Beyond these categories, the group claims the exfiltrated data contains specific items such as confidential settlement agreements, non-disclosure agreements (NDAs), company financial data, management folders, and SQL backups.

Organization profile

Dill Dill Carr Stonbraker & Hutchings is a law firm based in Denver, United States. The firm provides professional legal consulting and advocacy services across various practice areas.

Risk assessment and industry implications

This incident may pose a high risk due to the exposure of sensitive client information held by a law firm. The alleged compromise of medical and financial records could lead to identity theft or targeted phishing attacks against the affected individuals. Because the firm is based in the United States, it may face regulatory scrutiny and mandatory breach notification requirements under state and federal laws.

While information regarding the Genesis group remains limited, such leaks can result in significant reputational damage and the erosion of attorney-client privilege. For organizations in the professional services sector, particularly law firms, the exposure of litigation data and confidential agreements can undermine the core trust between a firm and its clients.

To defend against such threats, organizations typically implement layered security strategies. This includes robust backup solutions to ensure data availability and the use of encryption for data at rest and in transit to mitigate the impact of exfiltration. Furthermore, monitoring for unauthorized data transfers and implementing strict access controls are common defensive steps used to protect sensitive client information from being accessed by external actors.