Law Offices of Thomas J Skinner, IV targeted by Anubis ransomware group

• Ransomware group: Anubis
• Country: United States
• Sector: Professional Services
• Announcement date: February 3, 2026

The Anubis ransomware group has listed data allegedly belonging to the law firm Law Offices of Thomas J Skinner, IV on its leak site. This announcement, made on February 3, 2026, marks a significant data leak claim targeting a professional services provider in the United States.

Details of the claimed attack

According to the announcement published by the Anubis group, the threat actors have published a series of documents they claim belong to the Law Offices of Thomas J Skinner, IV. The group alleges that they successfully gained access to the firm's data by exploiting security vulnerabilities within their systems. To support their claims, the group provided screenshots that appear to show internal correspondence and various client files.

In modern cyberattack landscapes, ransomware groups often utilize a method known as double extortion. In these scenarios, attackers do not just encrypt a victim's files to demand a ransom for decryption; they also steal sensitive information before the encryption process begins. The threat of leaking this stolen data on a public leak site serves as additional leverage to pressure the organization into paying the ransom. This tactic significantly increases the pressure on the victim, as the exposure of sensitive information can lead to severe legal and reputational consequences.

Data allegedly involved in the leak

The screenshots provided by the Anubis group suggest a wide range of sensitive information has been compromised. The content of these images reportedly includes various legal and personal documents that are critical to the firm's operations and its clients' privacy. The specific types of data mentioned in the announcement include:

• Financial records
• Employee contact information
• Client contracts
• Legal correspondence
• Wills

The exposure of such diverse datasets, ranging from financial statements to highly personal documents like wills, highlights the high-value nature of the information held by legal professionals. When such sensitive data is leaked, it often leads to secondary threats, such as targeted phishing campaigns or identity theft, as malicious actors can use the stolen information to craft convincing fraudulent communications.

About the Law Offices of Thomas J Skinner, IV

The Law Offices of Thomas J Skinner, IV is a law firm based in Alabama, United States. The firm primarily provides specialized legal services in the areas of bankruptcy law and debt restructuring. Given its focus on these specific legal fields, the firm handles significant amounts of sensitive financial and personal documentation for its clients.

Impact and defensive considerations

This leak may pose a significant risk of privacy breaches and reputational damage to the firm's clients. Given the nature of the business, the exposure of sensitive personal information could lead to legal consequences under US laws and relevant state regulations. Clients of the firm may face an increased risk of identity theft or targeted phishing attacks as their private details become available to malicious actors.

Information regarding the Anubis group remains limited, and it is possible that the group may utilize this data for secondary extortion attempts. For organizations operating in the professional services sector, such incidents underscore the necessity of robust cybersecurity frameworks. Common defensive steps for organizations include implementing multi-factor authentication, maintaining regular offline backups, and conducting frequent vulnerability assessments to identify and patch security gaps before they can be exploited by threat actors.

Furthermore, organizations dealing with highly sensitive client data should prioritize encryption for data at rest and in transit, as well as continuous monitoring of their networks to detect unauthorized access attempts early. As ransomware groups continue to evolve their tactics, staying vigilant against the exploitation of security vulnerabilities remains a critical component of a comprehensive security posture.