Kairos ransomware group lists mortensenlawoffices.com/USA/99GB on its leak site

• Ransomware group: Kairos
• Country: United States
• Sector: Professional Services
• Announcement date: July 28, 2025

Kairos claims to have stolen data from Mortensen Law Offices

The threat actor known as Kairos has published an announcement on its leak site claiming to possess a significant amount of data belonging to Mortensen Law Offices. According to the claim, the threat actor has successfully exfiltrated 99 GB of data from the organization's network. This announcement was made on July 28, 2025, marking a potential data breach for the professional services firm.

Publicly available information regarding the Kairos group remains limited, making it difficult to determine the full scope of their operations or their specific motivations. Such groups typically operate by targeting organizations and threatening to release sensitive information if a ransom is not paid, a tactic frequently referred to as double extortion. In these scenarios, the attackers first encrypt the victim's systems to disrupt operations and subsequently steal sensitive data to use as leverage for extortion.

Details of the alleged data theft

The claim made by the Kairos group suggests that the stolen information is substantial in volume. While the specific file count has not been disclosed, the group asserts that the total size of the compromised data reaches 99 GB. The leaked samples provided in screenshots indicate that the stolen information is highly sensitive and contains various forms of personal identification and legal documentation.

The types of data allegedly included in the breach are:

• Driver's licenses
• Social security cards
• Bankruptcy declaration forms
• Personal identification documents

The presence of such documents suggests that the breach may involve highly confidential information belonging to the firm's clients, which could lead to significant privacy concerns for the individuals involved.

About Mortensen Law Offices

Mortensen Law Offices is a law firm based in the United States. The organization provides legal consulting and representation services to both individual and corporate clients across a variety of legal matters. Given the nature of their business, the firm handles a high volume of sensitive, private, and legally protected information for its clientele.

Implications and risks of the alleged breach

The allegedly leaked data may contain sensitive personal and financial information belonging to the firm's clients. This exposure could significantly increase the risk of identity theft and fraud for the affected individuals. For a professional services organization, particularly a law firm, such an incident carries heavy weight. Beyond the immediate technical impact, the breach of attorney-client privilege may lead to complex ethical and legal challenges for the organization.

From a regulatory perspective, the organization may face data breach notification obligations under United States laws and relevant state regulations. Furthermore, groups that employ double-extortion tactics can cause significant reputational damage to an organization through the public release of sensitive data. When sensitive client information is published on a leak site, it undermines the trust that clients place in their legal representatives.

To defend against such threats, organizations in the professional services sector often implement various defensive measures. These typically include robust encryption for data at rest and in transit, strict access controls to limit data exposure, and continuous monitoring of network activity to detect unauthorized exfiltration. Additionally, maintaining comprehensive incident response plans and conducting regular security awareness training can help mitigate the impact of such targeted attacks.