Falk, Waas, Hernandez, Cortina, Solomon & Bonner targeted by Rhysida ransomware

• Ransomware group: Rhysida
• Country: United States
• Sector: Professional Services
• Announcement date: December 30, 2025

Rhysida ransomware group claims breach of law firm

The Rhysida ransomware group has officially listed the professional services firm Falk, Waas, Hernandez, Cortina, Solomon & Bonner on its dedicated leak site. This announcement, made on December 30, 2025, marks a new instance of a targeted cyberattack against a legal organization. While the group has claimed responsibility for the incident, the full extent of the impact remains to be verified through independent investigation.

The claims made by the Rhysida group

According to the announcement posted by the threat actor, the Rhysida group alleges that they have successfully compromised the network of the organization. The group claims to have published data belonging to the firm on their leak site as of December 30, 2025. This type of activity is characteristic of modern ransomware operations, often referred to as double extortion, where attackers not only encrypt an organization's systems but also steal sensitive information to use as leverage during ransom negotiations.

In such scenarios, threat actors typically threaten to release stolen data on public leak sites if their demands are not met. This tactic places immense pressure on organizations due to the potential for reputational damage and legal repercussions. However, in this specific case, the group has not provided any screenshots or specific evidence to substantiate their claims of a successful network compromise.

Information regarding the leaked data

At this time, the specific nature and content of the data allegedly stolen by the Rhysida group remain unknown. The group has not provided any screenshots or detailed documentation to illustrate the scope of the breach. Consequently, it is impossible to verify the exact files or the volume of information that may have been compromised during the alleged attack.

The listing names no specific data types or categories of information that have been exfiltrated.

About Falk, Waas, Hernandez, Cortina, Solomon & Bonner

Falk, Waas, Hernandez, Cortina, Solomon & Bonner is a professional services organization operating within the legal sector. Based in Florida, the law firm provides a variety of legal services to its clients. Their areas of expertise include insurance defense, commercial litigation, and personal injury law.

Risk assessment and industry implications

This incident suggests that the organization's sensitive data may have been accessed by unauthorized parties. Because the organization operates in the professional services sector, specifically within a law firm, there is a heightened risk regarding the potential exposure of client data or proprietary trade secrets. In the legal profession, the confidentiality of client information is a cornerstone of the practice, making any breach a significant concern.

Furthermore, because the organization is based in the United States, the incident may trigger specific legal considerations. State-level data protection laws and potential mandatory notification requirements may be applicable depending on the nature of the data involved and the jurisdiction of the affected clients. Organizations must often navigate complex regulatory landscapes when a breach occurs.

The secondary risks associated with such a leak include the potential for the stolen information to be used by malicious actors for identity theft or for conducting highly targeted phishing campaigns against the firm or its clients. Organizations in this sector can mitigate such risks by implementing robust security frameworks, including multi-factor authentication, regular security awareness training, and comprehensive data encryption protocols. Continuous monitoring and a well-defined incident response plan are also essential components of a modern defensive posture against ransomware groups like Rhysida.