Lischkoff and Pitts, P.C. listed by 8base ransomware group

• Ransomware group: 8base
• Country: United States
• Sector: Financial Services
• Announcement date: December 6, 2023

The ransomware group known as 8base has listed the accounting and financial consulting firm Lischkoff and Pitts, P.C. on its dedicated leak site. The threat actor claims to have compromised the organization's systems and exfiltrated various documents related to the firm's professional operations.

The claimed attack and exfiltration event

According to an announcement published on the group's leak site, the threat actor identified as 8base alleges to have successfully compromised data belonging to Lischkoff and Pitts, P.C. The group claims that the breach involved the theft of various documents that are central to the firm's daily business functions, specifically focusing on its financial consulting and accounting operations.

The announcement, which was posted on December 6, 2023, serves as a claim of a successful data exfiltration. In such scenarios, ransomware groups often use these leak sites to pressure organizations by threatening to release sensitive information to the public if specific demands are not met. This tactic is a hallmark of modern cyber extortion campaigns.

The types of data claimed to be stolen

The 8base group has specified a wide range of document types that they claim to have obtained during the intrusion. The listed files suggest a significant breach of both corporate and personal information. The claimed data includes the following items:

• Invoices
• Receipts
• Accounting documents
• Personal data
• Certificates
• Employment contracts
• Confidentiality agreements
• Various personal files

No information was provided regarding the total size of the data stolen or the specific number of files involved in the breach. Additionally, the group has not issued a specific ransom demand in the available announcement.

About Lischkoff and Pitts, P.C.

Lischkoff and Pitts, P.C. is an accounting and financial consulting firm based in Alabama, United States. The firm provides professional services to individuals and businesses, including tax compliance, financial planning, accounting, and estate management.

Analysis and potential risks for the sector

The 8base group is recognized as a double-extortion actor that has been active since 2022. Double extortion is a technique where attackers not only encrypt an organization's data to disrupt operations but also steal sensitive information to use as leverage, threatening to leak it if the ransom is not paid. This method significantly increases the pressure on the victim, as the threat of a public data leak remains even if the organization can restore systems from backups.

Given that Lischkoff and Pitts, P.C. operates within the financial services sector, the potential impact of this leak is significant. The exposure of sensitive financial information can increase the risk of identity theft for the firm's clients. Such an event can undermine client trust and may potentially lead to increased regulatory scrutiny for the firm. Furthermore, the inclusion of employment contracts and confidentiality agreements in the claimed data set may facilitate targeted phishing attacks against the firm's employees, as attackers may use the stolen personal details to craft highly convincing social engineering attempts.

While reports indicate that the group's infrastructure was disrupted in early 2025, their past activities suggest that such groups may maintain operational continuity despite law enforcement or technical interventions. Organizations in the financial sector often employ defensive measures such as multi-factor authentication, robust encryption for data at rest and in transit, and continuous monitoring to mitigate these risks. Maintaining strict access controls and conducting regular security awareness training are also standard practices to defend against the types of data exfiltration and phishing attacks that follow such breaches.