Katz & Doorakian Law Firm, P.L. listed on Everest ransomware leak site

• Ransomware group: Everest
• Country: United States
• Sector: Professional Services
• Announcement date: June 24, 2025

The Everest ransomware group has listed Katz & Doorakian Law Firm, P.L. on its dedicated leak site. The announcement, posted on June 24, 2025, claims that the organization was targeted in a cyberattack occurring around June 12, 2025. While the listing confirms the firm's presence on the portal, the specific details regarding the scope of the breach remain limited to the group's claims.

The claims made by the Everest group

According to the announcement published on the Everest leak portal, the group has allegedly gained access to data belonging to Katz & Doorakian Law Firm, P.L. The threat actor group has indicated that they have published a file tree representing the firm's data structure. This type of disclosure is a common tactic used by ransomware groups to demonstrate the success of their intrusion and to pressure the victim into meeting ransom demands.

The Everest group is a known entity in the cyber threat landscape, having been active since 2020. The group is recognized for employing sophisticated tactics that involve both data exfiltration and extortion. In many modern ransomware campaigns, attackers do not merely encrypt a victim's systems but also steal sensitive information to use as leverage. This strategy is often referred to as double extortion, where the threat actor threatens to leak the stolen data on a public forum if the ransom is not paid.

Details regarding the leaked data

The announcement made by the Everest group mentions the publication of a file tree. However, the specific nature and content of the leaked data have not been disclosed by the group. The listing does not provide information regarding the total volume of data stolen or the specific number of files involved. Furthermore, no specific ransom demand has been mentioned in the public announcement.

• The listing names no specific data types.

About Katz & Doorakian Law Firm, P.L.

Katz & Doorakian Law Firm, P.L. is a professional services organization based in Florida, United States. The firm provides specialized legal services, focusing on areas such as personal injury, insurance disputes, and property damage cases. Given the nature of their practice, the firm handles sensitive client information and legal documentation essential to their professional operations.

Implications and industry considerations

This incident highlights the significant risks faced by professional services firms, particularly those in the legal sector. A breach of this nature may compromise client confidentiality and expose sensitive legal documentation to unauthorized parties. Because the firm is a US-based entity, a confirmed data breach could lead to significant legal consequences under both state laws and federal regulations governing data protection and privacy.

The potential exposure of such data increases the risk of secondary attacks against the firm's clients, such as identity theft or highly targeted phishing campaigns. When attackers possess knowledge of legal disputes or insurance claims, they can craft much more convincing social engineering attacks against the individuals involved in those cases.

For organizations in the professional services sector, maintaining robust defensive postures is critical. Common defensive steps include implementing multi-factor authentication (MFA) across all remote access points, maintaining offline or immutable backups to mitigate the impact of encryption, and conducting regular security awareness training to help employees recognize phishing attempts. Additionally, organizations should prioritize data encryption at rest and in transit to ensure that even if exfiltration occurs, the data remains unreadable to unauthorized actors.