Langley Twigg Law targeted by Anubis ransomware group

• Ransomware group: Anubis
• Country: New Zealand
• Sector: Professional Services
• Announcement date: February 9, 2026

Anubis group claims data leak involving Langley Twigg Law

The Anubis ransomware group has published a claim on their leak site regarding a data breach allegedly involving Langley Twigg Law. On February 9, 2026, the threat actor group announced a data leak involving the New Zealand-based legal firm. According to the announcement, the group claims to have published a dataset containing the firm's financial and personal information.

The incident was announced via a post on a ransomware leak site, a platform where cybercriminals often host stolen data to pressure victims into paying ransoms. This tactic is commonly known as double extortion, where attackers not only encrypt an organization's systems but also threaten to release sensitive information publicly if their demands are not met. In this specific case, the group's post included screenshots that suggest documents related to the firm's operational processes and employees may have been exposed during the attack.

Details of the allegedly stolen data

The screenshots provided by the Anubis group in their announcement display a variety of sensitive documents. These materials appear to include highly personal and confidential information that could be used for malicious purposes. The content identified in the screenshots includes the following types of data:

• Passport data
• Driver's license information
• Financial reports
• Payroll records
• Land titles
• Legal correspondence

The presence of such diverse documentation suggests a broad compromise of the firm's digital environment. While the specific volume of the data or the exact number of files taken have not been disclosed by the group, the nature of the leaked items points toward a significant exposure of both corporate and individual information.

About Langley Twigg Law

Langley Twigg is a law firm based in Napier, New Zealand. The organization provides legal advice and representation services to a variety of clients, including both individual and corporate entities. As a professional services firm handling sensitive legal matters, the confidentiality of client information is a cornerstone of their operations.

Implications and potential risks

This incident suggests that personal and corporate data within Langley Twigg Law may have been exposed to unauthorized third parties. The presence of identity documents in the leaked material may indicate that affected individuals could face risks of identity theft and fraud. For a law firm, the breach of client confidentiality could lead to professional reputational damage and legal consequences.

Furthermore, the firm may be required to address data protection obligations under the New Zealand Privacy Act 2020. The publication of this data may create a basis for secondary attacks or targeted phishing attempts against the firm or its clients. In such scenarios, attackers often use the stolen information to craft highly convincing social engineering campaigns.

Information about the Anubis group remains limited. In general, organizations in the professional services sector can mitigate these risks by implementing robust security frameworks, such as multi-factor authentication, regular employee training on phishing awareness, and strict access controls to ensure that sensitive legal and financial documents are only accessible to authorized personnel. Continuous monitoring and a well-defined incident response plan are also essential for managing the fallout of such breaches.