Elmore Goldsmith Kelley & deHoll listed on Inc Ransom leak site

• Ransomware group: Inc Ransom
• Country: United States
• Sector: Professional Services
• Announcement date: January 22, 2026

Inc Ransom claims data breach at Elmore Goldsmith Kelley & deHoll

The Inc Ransom ransomware group has officially listed the professional services firm Elmore Goldsmith Kelley & deHoll on its dedicated leak platform. According to the announcement made on January 22, 2026, the threat actor group claims to have successfully compromised the firm's data and has issued threats to release the information publicly.

The group has provided evidence to support their claims by posting images of various documents related to the firm's business operations. These screenshots appear to show samples of documentation that are directly linked to the firm's internal legal processes, official correspondence, and various contracts. No specific information was provided regarding the total volume of data stolen or the specific number of files involved in the incident. Additionally, there was no mention of a ransom demand or a specific amount requested by the attackers.

Details of the claimed data theft

While the exact scale of the breach remains unconfirmed, the evidence provided by the Inc Ransom group suggests that the compromised information is highly sensitive. The materials displayed in the leak site screenshots appear to involve the core functions of a legal practice. The types of data identified in the claim include:

• Legal documents
• Contracts
• Official correspondence

The presence of such documents on a leak site highlights the risks associated with ransomware attacks targeting professional services. In these scenarios, threat actors often employ double-extortion tactics. This method involves not only encrypting the victim's systems to disrupt operations but also stealing sensitive data to use as leverage. By threatening to leak confidential information, attackers aim to pressure the organization into paying a ransom to prevent the public exposure of their private records.

About Elmore Goldsmith Kelley & deHoll

Elmore Goldsmith Kelley & deHoll is a professional services organization based in the United States. The firm specializes in the field of construction law, providing a wide range of legal expertise to its clients. Their professional scope includes providing legal counsel on various aspects of construction projects, such as contract negotiations, risk management, and public procurement. Furthermore, the firm handles complex litigation and provides specialized legal guidance tailored to the complexities of the construction industry.

Potential impact and long-term risks

The potential release of the data claimed by Inc Ransom could have significant consequences for the firm and its clients. For a law firm, a data breach of this nature poses a direct threat to client confidentiality and can lead to a substantial loss of professional reputation. Because the organization is based in the United States, such an incident may trigger legal proceedings under relevant state laws and various data protection regulations.

Beyond the immediate legal and reputational challenges, there is a risk that the leaked data could be exploited for further malicious activities, such as identity theft or highly targeted phishing attacks against the firm's clients or partners. The Inc Ransom group has been known to be active since mid-2023, and the nature of these leaks suggests they can create long-term operational risks for the affected organization.

To mitigate such risks, organizations in the professional services sector often focus on strengthening their defensive postures. This typically involves implementing robust encryption for data at rest and in transit, enforcing strict access controls, and maintaining comprehensive logging and monitoring to detect unauthorized access. Regular security awareness training is also a common defensive step to help employees recognize and avoid the phishing attempts that often follow such breaches.