Inc Ransom claims data breach at domingogarcia.com

• Ransomware group: Inc Ransom
• Country: United States
• Sector: Professional Services
• Announcement date: March 30, 2026

Inc Ransom claims to have exfiltrated data from domingogarcia.com

The threat actor group known as Inc Ransom has listed the law firm domingogarcia.com on its dedicated leak site. According to the announcement made by the group, they claim to have successfully exfiltrated data belonging to the organization. This listing serves as a public claim by the ransomware group regarding their successful intrusion into the firm's systems.

Details of the alleged attack

The incident was announced on March 30, 2026. The Inc Ransom group alleges that they have gained unauthorized access to the operational data of the firm. To support their claims, the group has shared various screenshots as part of the announcement. These images are intended to demonstrate the nature of the data they have allegedly obtained during the attack.

The group utilizes a tactic known as double extortion. In these types of cyberattacks, threat actors do not merely encrypt an organization's files to disrupt operations; they also steal sensitive information. The attackers then threaten to leak this stolen data on public forums or leak sites if the victim fails to meet their demands. This approach increases the pressure on the target organization by threatening their reputation and legal standing.

Data samples and affected information

The screenshots provided by the threat actor include samples of highly sensitive materials. The information identified in the leak involves the following:

• Identity information
• Personal documents

Specifically, the shared screenshots contain samples of passports, identification cards, and various other personal documents. No specific information was provided regarding the total size of the data stolen or the exact number of files involved. Additionally, no ransom demand has been disclosed in the current listing.

About domingogarcia.com

Domingo Garcia is a law firm located in the United States. The firm has been representing accident victims for over 35 years. They provide legal services through an experienced legal team that specializes in injury and wrongful death cases.

Potential impact and security implications

This alleged leak may pose a significant risk of exposing sensitive personal data belonging to the law firm's clients. Because the entity operates within the United States, this incident could lead to complex legal consequences regarding state-level data privacy laws and professional confidentiality obligations. The exposure of identification documents can create a dangerous foundation for identity theft and highly targeted phishing attacks aimed at both clients and employees.

Given the nature of the group's tactics, the firm's operational continuity may also be at risk. While information regarding the specific capabilities and history of the Inc Ransom group remains limited, the threat they pose to professional service providers is evident. Organizations in the legal sector often handle highly sensitive client information, making them attractive targets for such actors.

To mitigate such risks, organizations typically focus on robust defensive measures. These include implementing multi-factor authentication (MFA) across all systems, maintaining rigorous patch management schedules to close vulnerabilities, and conducting regular employee training to recognize phishing attempts. Furthermore, maintaining offline, immutable backups is a critical component of a resilient cybersecurity posture, helping to ensure that operational continuity can be maintained even in the event of a successful ransomware deployment.