Langley Twigg Law targeted by Anubis ransomware group

• Ransomware group: Anubis
• Country: New Zealand
• Sector: Professional Services
• Announcement date: January 25, 2026

Anubis claims data breach at Langley Twigg Law

The threat actor known as Anubis has announced the alleged leak of personal and corporate data belonging to Langley Twigg Law. This announcement was made on the group's leak site on January 25, 2026, the same day the attack was claimed to have occurred. The breach involves sensitive information belonging to a professional services firm based in New Zealand.

Ransomware attacks often follow a pattern of double extortion, where threat actors not only encrypt an organization's systems to disrupt operations but also exfiltrate sensitive data. The goal of this tactic is to pressure the victim into paying a ransom by threatening to release the stolen information on public leak sites. Such sites serve as a platform for attackers to claim responsibility and showcase the stolen data to increase pressure on the target organization.

Details of the alleged data theft

The Anubis group has published an announcement on its leak site claiming to have compromised data belonging to Langley Twigg Law. According to the post, the firm's financial records and employee documents have been obtained. The threat actor claims that the stolen data includes information regarding the firm's operational processes and its financial status.

Evidence provided by the attackers includes screenshots that purportedly show the stolen files. These images suggest a wide range of sensitive documentation has been accessed. The specific types of data mentioned in the leak include:

• Passport data
• Identity information
• Financial records
• Payroll documents
• Land and property records
• Legal correspondence

While the group has made these claims, no information was provided regarding the specific size of the data stolen or the total file count. Furthermore, no ransom demand has been specified in the announcement.

About Langley Twigg Law

Langley Twigg is a law firm based in Whakatāne, New Zealand. It provides legal services to individual and corporate clients in various specialized areas. The firm's practice covers several legal fields, including property law, family law, commercial law, and estate planning.

Potential risks and implications

This breach may pose significant risks of identity theft and fraud for both employees and clients of the firm. Given the nature of the legal practice, the exposure of these documents may violate client confidentiality and lead to legal consequences under the New Zealand Privacy Act 2020. The sensitive nature of the documents, such as passports and land records, increases the potential for misuse by malicious actors.

As a secondary risk, the leaked data could be utilized in targeted spear-phishing campaigns. In such scenarios, attackers use the stolen personal or professional information to craft highly convincing and personalized messages to deceive individuals into revealing even more sensitive information or installing malware.

Information regarding the Anubis group is limited. For organizations facing similar threats, it is often necessary to fulfill data breach notification obligations and inform the affected parties. Defensive measures for professional services firms typically involve implementing robust access controls, maintaining regular offline backups, and conducting continuous monitoring of network activity to detect unauthorized data exfiltration early.