Inc Ransom ransomware group lists cullottalaw.com on its leak site

• Ransomware group: Inc Ransom
• Country: United States
• Sector: Professional Services
• Announcement date: September 9, 2026

The Inc Ransom ransomware group has officially listed cullottalaw.com as a target on its dedicated leak site. In an announcement posted on September 9, 2026, the threat actors claimed to have successfully breached the systems of the organization and exfiltrated data belonging to the firm.

The claimed attack and exfiltration

According to the announcement published by Inc Ransom, the group gained unauthorized access to the internal systems of cullottalaw.com. The threat actors allege that this access allowed them to steal sensitive information from the organization. This claim was made on the same day the announcement appeared on the group's leak portal, which serves as a platform for the group to pressure victims by showcasing stolen information.

The group's announcement is currently active on their leak site. However, despite the claim of a successful breach, the threat actors have not provided any specific details regarding the nature or the content of the allegedly exfiltrated data. Furthermore, no screenshots or evidence have been provided to substantiate the claims made by the group. At this time, the listing does not specify the volume of data stolen or the specific file types involved in the breach.

Data and information details

The current listing on the Inc Ransom leak site provides no specific information regarding the content of the stolen files. The announcement names no data types or specific categories of information that were allegedly taken during the intrusion.

Organization profile

Cullotta Bravo Law Group is a professional services firm based in Aurora, Illinois. The firm possesses over 35 years of experience and operates across various legal areas, including personal injury, nursing home abuse, and workers' compensation.

Risk assessment and implications

The incident highlights the risks associated with the double-extortion tactics frequently employed by groups like Inc Ransom. In these types of attacks, threat actors not only encrypt an organization's data to disrupt operations but also steal sensitive information to use as leverage during ransom negotiations. The publication of exfiltrated data can lead to significant secondary risks for the organization and its clients, such as identity theft or highly targeted phishing campaigns aimed at the individuals whose information was compromised.

For a law firm, the implications of such a breach could be particularly severe. If the leaked data contains confidential client information, the organization could face legal proceedings under US state laws and relevant professional confidentiality regulations. Such a situation often leads to significant reputational damage and the erosion of client trust, which is critical for professional service providers.

The group's past activities suggest that their methods can negatively impact an organization's operational continuity through both data encryption and exfiltration. While public information regarding the specific activities of Inc Ransom remains limited, their ability to impact business operations through data exposure is a known characteristic of their model. Organizations in the professional services sector typically focus on robust defensive measures, such as implementing strict access controls, maintaining comprehensive backups, and conducting regular security audits, to mitigate the impact of such targeted threats.