Law Offices Taenzer & Ettenson, P.C. targeted by Inc Ransom

• Ransomware group: Inc Ransom
• Country: United States
• Sector: Professional Services
• Announcement date: February 27, 2026

The ransomware group known as Inc Ransom has listed data allegedly belonging to Law Offices Taenzer & Ettenson, P.C. on its leak site. According to the announcement made on February 27, 2026, the threat actor claims to have exfiltrated a significant volume of information, totaling approximately 30GB of data.

The incident involving Inc Ransom

The threat actor known as Inc Ransom has listed data allegedly belonging to Law Offices Taenzer & Ettenson, P.C. on its leak site. The group claims to have obtained the firm's operational and financial records. The announcement specifies that the allegedly exfiltrated data amounts to 30GB. This claim was made on the same day the attack was allegedly carried out, February 27, 2026.

Ransomware groups often utilize leak sites to pressure victims into paying ransoms. These sites serve as a public gallery where stolen data is showcased to increase the visibility of the breach. This tactic is a core component of modern cyber extortion, where the threat of exposing sensitive information is used as leverage against the victim organization.

Alleged contents of the leak

The leak allegedly contains a wide variety of sensitive information. Based on the claims made by the threat actor, the stolen data includes confidential documents, client data, non-disclosure agreements (NDAs), financial data, operations, corporate data, business agreements, and financial databases. A provided screenshot from the group displays various financial spreadsheets and legal document samples, which the group uses to demonstrate the validity of their claims.

The specific types of data allegedly affected include:

• Client data
• Financial data
• Non-disclosure agreements
• Corporate data

In many ransomware scenarios, the theft of such information is used in a double-extortion scheme. In this model, attackers not only encrypt an organization's systems to disrupt operations but also steal sensitive data to threaten its public release. This forces the victim to choose between paying to restore their systems or paying to prevent the exposure of private information.

Organization profile

Taenzer & Ettenson, P.C. is a law firm based in Illinois that provides legal services for personal and business needs. They offer professional support to clients in legal consulting and litigation processes.

Implications and industry risks

Cyberattacks against law firms may pose significant risks to client confidentiality and attorney-client privilege. The allegedly exfiltrated data could potentially be used for identity theft or targeted phishing campaigns. Because the data involves sensitive legal and financial records, the impact of such a breach can extend far beyond the immediate digital infrastructure of the firm.

Given the firm's location in the United States, legal proceedings under state-level data protection laws and professional responsibility regulations may be triggered. Organizations in the legal sector must navigate complex regulatory landscapes when sensitive client information is compromised. The nature of legal work makes these firms high-value targets for threat actors seeking lucrative information.

Considering the double-extortion tactics of the Inc Ransom group, the operational continuity of the firm may be pressured, and risks of secondary leaks may be observed. To mitigate these risks, organizations in the professional services sector often implement defensive measures such as multi-factor authentication, regular offline backups, and rigorous employee training to recognize phishing attempts. Maintaining strict access controls and monitoring for unusual data exfiltration patterns are also standard practices to defend against such sophisticated threats.