Estudio O'Farrell listed on crypto24 ransomware leak site

• Ransomware group: crypto24
• Country: Argentina
• Sector: Professional Services
• Announcement date: March 24, 2026

Estudio O'Farrell targeted by crypto24 ransomware group

The Argentine law firm Estudio O'Farrell has been listed on the leak site of the ransomware group known as crypto24. According to an announcement published by the threat actors, the organization has been targeted in a cyberattack involving unauthorized access and data exfiltration.

Details of the alleged attack

On March 24, 2026, the crypto24 group published an announcement on their dedicated leak site naming Estudio O'Farrell. The threat actors claim to have successfully gained access to the organization's network and subsequently exfiltrated data from their systems. While the group has made this public claim, information regarding this specific threat actor remains limited in the public domain.

The group's announcement marks a potential significant security incident for the professional services firm. In many modern ransomware campaigns, threat actors utilize leak sites to exert pressure on victims. These sites serve as a platform for the attackers to announce their successful breaches, often providing a countdown or a list of victims to increase the visibility of the attack and the perceived severity of the breach.

Data involved in the claim

Regarding the specifics of the alleged breach, the threat actor has not provided detailed information or screenshots concerning the content of the data that was purportedly stolen. The listing does not specify the types of files or the volume of information involved in the incident.

• No specific data types were named in the listing.

The absence of detailed information regarding the leaked content is a common occurrence in the early stages of a ransomware leak site announcement. Without verifiable evidence or specific file descriptions, the exact scope of the data compromise remains unconfirmed.

About Estudio O'Farrell

Estudio O'Farrell is a well-established law firm based in Argentina. The organization provides a wide range of legal consulting services to its clients, specializing in several critical areas of law. Their expertise includes corporate law, tax law, and dispute resolution, making them a significant player in the professional services sector within the region.

Potential risks and organizational impact

This claim poses several risks to the operational continuity of Estudio O'Farrell. If the threat actor employs double extortion tactics—a method where attackers not only encrypt data but also threaten to leak sensitive information to damage the victim's reputation—the pressure on the organization could increase significantly. The publication of sensitive legal or client data can lead to severe reputational damage.

Furthermore, depending on the nature of the data involved, secondary risks may emerge. These include the potential for identity theft or the execution of targeted phishing attacks against the organization's employees and clients. Such attacks often leverage stolen information to gain further access to networks or to defraud individuals.

From a regulatory perspective, the organization may face specific legal obligations. Under Argentine data protection regulations, the firm may be required to follow mandatory notification requirements regarding the breach. Organizations in the professional services sector, which often handle highly sensitive client information, must remain vigilant against such threats. Common defensive measures for organizations include maintaining robust network monitoring, implementing strict access controls, and ensuring regular backups are stored offline to mitigate the impact of encryption and exfiltration events.