Lockbit5 ransomware group lists guarnera.com.br on its leak site

• Ransomware group: Lockbit5
• Country: Brazil
• Sector: Professional Services
• Announcement date: February 7, 2026

The LockBit ransomware group has listed the Brazilian law firm Guarnera Advogados on its dedicated leak site, claiming that the organization has been the victim of a data breach. This announcement, posted on February 7, 2026, follows an alleged attack that occurred on January 31, 2026. The group is currently exerting pressure on the firm by setting a deadline of February 19, 2026, for the potential public release of the stolen information.

The details of the claim

According to the announcement made by the LockBit5 group, the law firm has been targeted in a cyberattack. While the group has officially listed the organization on their platform, the specific details regarding the nature of the breach remain limited. The group has not provided any specific information regarding the nature of the leaked data, nor have they disclosed the total size of the data or the specific number of files involved in the incident.

Ransomware groups often utilize leak sites to increase pressure on their victims. These sites serve as a public gallery where the group advertises its successful breaches to shame organizations into paying ransoms. By setting a countdown or a specific deadline for data publication, threat actors attempt to create a sense of urgency, hoping that the threat of public exposure will compel the victim to meet their demands.

Data and impact

Regarding the content of the breach, the current listing provides no specific information regarding the nature of the leaked data. There is no mention of specific file types, database names, or the volume of information that has been compromised.

In many modern ransomware campaigns, threat actors employ a tactic known as double extortion. In this scenario, the attackers do not merely encrypt the victim's files to disrupt operations; they also exfiltrate sensitive data before the encryption process begins. The threat of leaking this sensitive information on a public forum provides the attackers with additional leverage, as the reputational and legal damage from a data leak can be far more devastating than the operational downtime caused by encrypted systems.

Organization profile

Guarnera Advogados is a Brazil-based law firm with over 35 years of experience. The firm specializes in international transactions and provides various legal services to its clientele.

Risk assessment and implications

The potential exposure of data belonging to a law firm presents significant risks. Because legal practices handle highly sensitive client information, a breach of this nature may lead to the violation of client confidentiality. Furthermore, the firm may be subject to intense scrutiny regarding its data protection obligations under Brazil's LGPD legislation, which governs how personal data must be handled and protected.

The disclosure of such data could create secondary risks for the firm's clients, including the possibility of identity theft or targeted phishing attacks. When sensitive legal or personal details are leaked, attackers can use that information to craft highly convincing social engineering campaigns against the individuals involved.

To mitigate such risks, organizations in the professional services sector often focus on robust defensive measures. These include implementing strict access controls to ensure that sensitive data is only available to authorized personnel, maintaining comprehensive logging and monitoring to detect unauthorized exfiltration, and conducting regular security awareness training to help employees recognize phishing attempts. Additionally, maintaining offline, immutable backups is a critical component of a resilient defense against ransomware-driven disruptions.