Dragonforce ransomware group lists www.mbmlawsc.com on its leak site

• Ransomware group: Dragonforce
• Country: United States
• Sector: Professional Services
• Announcement date: July 31, 2026

Dragonforce claims data breach at MBM Law

The Dragonforce ransomware group has listed a significant amount of data on its leak site, claiming the information belongs to the law firm MBM Law (Moore Bradley Myers). According to the announcement made on July 31, 2026, the group alleges they successfully targeted the organization's systems. This incident follows a claimed attack date of July 30, 2026, suggesting a rapid progression from the initial breach to the public listing on the group's platform.

Ransomware groups often utilize leak sites as a tool for double extortion. In this model, attackers do not merely encrypt an organization's files to disrupt operations; they also steal sensitive information to use as leverage. By threatening to publish stolen data, the threat actors attempt to exert maximum pressure on the victimized institution to meet ransom demands. This tactic shifts the focus from simple operational disruption to the much more damaging threat of public exposure and regulatory scrutiny.

Details of the alleged theft

The announcement made by the Dragonforce group provides specific claims regarding the volume of information they have allegedly obtained. The group asserts that they have acquired a total of 1.06 TB of data from the firm's infrastructure. While the sheer scale of the data volume is highlighted, the listing does not provide specific details regarding the nature or the exact content of the files involved.

The listing names no specific data types or individual files that have been compromised.

The impact of the threat

The group's decision to list the data on a public leak site is assessed as an attempt to exert pressure on the institution. By making the threat of publication visible to the public and the victim, the attackers aim to create a sense of urgency. This psychological pressure is a hallmark of modern ransomware operations, where the goal is to force the organization into a position where paying the ransom appears to be the only way to prevent a catastrophic loss of privacy and reputation.

About MBM Law

MBM Law, also known as Moore Bradley Myers, is a law firm based in the United States, specifically in South Carolina. Founded in 1971, the firm has a long-standing history of providing legal services. They offer a wide range of legal consulting and representation services to a diverse clientele, including individuals, families, and various businesses, covering a broad spectrum of legal matters.

Analysis and organizational risks

Because the target is a law firm, the allegedly compromised data may contain highly sensitive client information and privileged legal documents. The exposure of such data carries significant secondary risks for the firm's clients, including the potential for identity theft or the launch of targeted phishing campaigns against individuals represented by the firm. Such secondary attacks are common when personal and professional data are leaked in large volumes.

Furthermore, since the institution is based in the United States, this incident could trigger legal proceedings under various state laws and may necessitate compliance with specific data breach notification requirements. The legal landscape regarding data protection is complex, and organizations must navigate these requirements to mitigate legal and regulatory exposure.

The nature of the Dragonforce group also introduces additional complexity. The group reportedly employs a model that provides infrastructure to various affiliates. This suggests that the actual execution of the attack may have been carried out by different actors using the group's framework, which can make attribution and investigation more difficult for security professionals.

For organizations in the professional services sector, such incidents highlight the critical importance of robust cybersecurity defenses. Protecting operational continuity and maintaining client trust are paramount. Organizations often implement defensive measures such as multi-factor authentication, regular offline backups, and comprehensive employee training to mitigate these risks. The potential for both operational disruption and long-term reputational damage makes the protection of sensitive legal data a top priority for firms like MBM Law.