Inc Ransom ransomware group lists sslf.local on its leak site

• Ransomware group: Inc Ransom
• Country: United States
• Announcement date: July 30, 2026

Inc Ransom claims breach of Samuels & Thornton

The threat actor known as Inc Ransom has listed the organization sslf.local on its dedicated leak site. According to the announcement made on July 30, 2026, the group claims to have successfully gained access to the organization's network and subsequently exfiltrated data from their systems.

In support of their claims, the threat actor has provided various images of documents as alleged evidence of the intrusion. This type of public listing is a common tactic used by ransomware groups to pressure victims into meeting ransom demands by demonstrating that they have successfully compromised the target's infrastructure and obtained sensitive files.

Details of the alleged data exfiltration

Regarding the specifics of the breach, there is no specific information provided regarding the content of the allegedly exfiltrated data. While the group has not detailed the exact nature or volume of the files taken, they have provided screenshots that display several document samples. These samples appear to be related to the firm's specific practice areas.

The listing names no specific data types within the provided documentation.

About Samuels & Thornton

Samuels & Thornton is a law firm based in New Orleans. The firm specializes in providing legal services across several specific areas of law, including medical malpractice, personal injury, product liability, and auto accident litigation.

Potential implications and industry risks

The nature of the target presents significant risks. Given that the victim is a law firm, the leaked data may contain sensitive information that could violate attorney-client privilege. Such a breach can lead to substantial legal liabilities under United States laws and various state regulations. Furthermore, the clients of the firm may face direct risks, such as identity theft or becoming targets of highly specific, targeted phishing attacks.

The incident highlights the dangers of double-extortion tactics, a method frequently employed by ransomware groups like Inc Ransom. In a double-extortion scenario, attackers not only encrypt a victim's data to disrupt operations but also steal sensitive information to use as leverage. The publication of stolen data can cause severe damage to a firm's professional reputation and significantly disrupt its operational processes.

To defend against such threats, organizations in the legal sector often implement various security measures. These typically include robust access controls, regular security awareness training for staff to prevent phishing, and comprehensive data encryption to protect sensitive client information. Maintaining offline backups and implementing strong network monitoring can also help organizations detect and respond to unauthorized access attempts before data exfiltration occurs.