Inc Ransom ransomware group lists bereskinparr.com smartbiggar.ca on its leak site

• Ransomware group: Inc Ransom
• Country: Canada
• Sector: Professional Services
• Announcement date: October 22, 2026

Inc Ransom claims to have targeted Canadian law firms

The threat actor known as Inc Ransom has listed two prominent Canadian legal entities on its leak site. The group claims to have successfully targeted bereskinparr.com and smartbiggar.ca, alleging that they have obtained sensitive information belonging to these organizations. The announcement regarding this alleged breach was posted on the group's leak site on October 22, 2026.

According to the claims made by the threat actor, the intrusion occurred shortly before the public announcement. The group cited October 21, 2026, as the date the attack took place. While the listing has been made public, no screenshots or visual evidence were provided by the group to substantiate the claims at the time of the announcement.

Details of the alleged data theft

Inc Ransom alleges that the breach resulted in the acquisition of various types of sensitive information. The group claims that the stolen data includes critical files that are vital to the operations of professional service firms. While the specific volume of data and the exact number of files involved have not been disclosed by the group, the nature of the alleged theft focuses on highly confidential materials.

The specific types of data the group claims to have exfiltrated include:

• Databases
• Client data
• Case files

The lack of specific details regarding the total size of the data or the specific ransom demand leaves several questions regarding the full scope of the incident unanswered. However, the group's claim focuses heavily on the sensitive nature of the documents stolen.

The targeted organizations

The entities identified in the leak claim are major players in the Canadian legal landscape, specifically within the intellectual property sector. Bereskin & Parr is a Canadian law firm that specializes in intellectual property law. Their professional services include patent and trademark registration as well as litigation.

Similarly, Smart & Biggar is recognized as a leading Canadian law firm. This firm focuses heavily on intellectual property and technology law, serving clients who require specialized legal expertise in these highly technical and sensitive fields.

Implications and risks of the alleged breach

The claims made by Inc Ransom highlight the significant risks faced by organizations operating in the professional services sector. Because this group frequently employs double-extortion tactics, there is a high probability that the alleged stolen data could be published on the dark web or sold to other malicious actors if a ransom is not paid. Double extortion is a common ransomware tactic where attackers not only encrypt an organization's data but also steal it, using the threat of public exposure to pressure the victim into paying.

For law firms specializing in intellectual property, the exposure of client confidentiality and trade secrets poses a severe risk. The nature of their work involves handling highly sensitive proprietary information, and a leak could undermine the trust established with their clients. Furthermore, the leaked data could potentially be utilized by other criminals for identity theft or to launch highly targeted phishing campaigns against the firm or its clients.

From a regulatory perspective, entities operating in Canada may face significant legal obligations. Under the Personal Information Protection and Electronic Documents Act (PIPEDA), data breach notification obligations may be triggered if personal information is compromised. Such incidents can lead to long-term negative impacts on the reputation of the affected organizations. To defend against such threats, organizations typically focus on robust data encryption, strict access controls, and comprehensive employee training to mitigate the risk of successful extortion.