Gallon, Takacs & Boissoneault listed on Everest ransomware leak site

• Ransomware group: Everest
• Country: United States
• Sector: Professional Services
• Announcement date: July 24, 2025

The Everest ransomware group has listed the law firm Gallon, Takacs & Boissoneault on its dedicated leak site. According to the announcement, the threat actor claims to have successfully compromised data belonging to the organization.

The alleged attack by Everest

The threat actor known as Everest claims to have gained unauthorized access to the systems of Gallon, Takacs & Boissoneault. This announcement was published on the group's leak portal on July 24, 2025. While the announcement was made in July, the group claims the initial attack occurred on June 12, 2025.

Everest is recognized as a Russian-speaking entity that has been active in the cybercrime landscape since 2020. The group is primarily known for its engagement in data exfiltration and extortion tactics. In such scenarios, ransomware groups typically focus on stealing sensitive information to use as leverage during negotiations, a tactic often referred to as double extortion. This method involves threatening to release the stolen data publicly if the victim refuses to pay the ransom demand.

Data involved in the claim

Regarding the contents of the alleged breach, the listing provides no specific details regarding the nature of the allegedly compromised data. No information has been provided concerning the volume of the files or the specific types of documents that were targeted during the operation.

About Gallon, Takacs & Boissoneault

Gallon, Takacs & Boissoneault is a law firm based in Maine, United States. The firm provides legal counsel and representation in several specialized areas, including personal injury, workers' compensation, and social security disability claims.

Impact and industry implications

Given that the institution is a law firm, there is a possibility that the exfiltrated data contains sensitive client information and confidential legal documents. This potential exposure could lead to secondary risks for clients, such as identity theft and targeted fraud. Furthermore, as a US-based entity, the firm may face legal scrutiny under state-level data protection regulations and professional ethical standards.

Considering the history of the Everest group, it is possible that they may attempt double extortion by threatening to publish or sell the stolen data. This highlights the significant risk posed to professional services firms that handle highly sensitive litigation and personal information.

In general, organizations in the professional services sector often implement various defensive steps to mitigate such risks. These measures typically include maintaining robust backup solutions, implementing multi-factor authentication, and conducting regular security awareness training for employees. Monitoring network traffic for unusual data exfiltration patterns is also a common practice used to detect unauthorized data movement before it reaches a critical stage.

Summary of the incident

• Organization: Gallon, Takacs & Boissoneault
• Ransomware group: Everest
• Claimed attack date: 2025-06-12
• Announcement date: 2025-07-24
• Type of incident: Data breach claim