Lonich Patton Ehrlich Policastri listed on Qilin ransomware leak site

• Ransomware group: Qilin
• Country: United States
• Sector: Professional Services
• Announcement date: December 10, 2025

Qilin ransomware group claims breach of Lonich Patton Ehrlich Policastri

The Qilin ransomware group has officially listed the professional services firm Lonich Patton Ehrlich Policastri on its dedicated leak site. According to the announcement made on December 10, 2025, the threat actor group claims to have successfully breached the organization's network and exfiltrated sensitive information. This incident follows a pattern of aggressive tactics used by ransomware groups to pressure victims into meeting financial demands.

The group's announcement serves as a public notification of the alleged compromise. By listing the organization on a leak site, the threat actors aim to increase visibility and exert maximum pressure on the target. In this specific instance, the group has already begun releasing samples of the data they claim to have stolen to demonstrate the validity of their breach and to increase the psychological pressure on the victim organization.

Details of the alleged data exfiltration

The Qilin group claims to have gained unauthorized access to the network of Lonich Patton Ehrlich Policastri and subsequently moved sensitive data out of the environment. While the group has provided certain evidence to support their claims, the full scope and volume of the exfiltrated data remain unknown. No specific file counts or the total size of the stolen data have been disclosed in the announcement.

The group has shared specific samples to validate their claims, including screenshots that display various records and identification documents. Based on the information provided by the threat actor, the affected data types include:

• Identification documents
• Corporate documents

The publication of such sensitive documentation is a hallmark of modern ransomware operations, where the threat is no longer limited to data encryption but extends to the public exposure of private information.

About Lonich Patton Ehrlich Policastri

Lonich Patton Ehrlich Policastri is a professional services firm based in California. The organization provides a variety of legal consulting and representation services to its clients. Their areas of expertise include family law, real estate law, and commercial litigation.

Impact and security implications of the incident

This incident highlights the significant risks posed by double-extortion ransomware tactics. In a double-extortion scenario, attackers do not merely encrypt an organization's systems to disrupt operations; they also steal sensitive data to threaten its public release. This tactic is designed to create a secondary layer of pressure, as the threat of a data leak can cause irreparable damage to an organization's reputation and lead to significant legal consequences.

For a legal firm such as Lonich Patton Ehrlich Policastri, the exposure of sensitive documents carries high stakes. The potential release of identity documents and corporate records could significantly increase the risk of identity theft and fraud for both the organization's employees and its clients. Furthermore, because the entity is based in the United States, this breach may trigger legal processes under various state-level data breach notification laws and relevant privacy regulations.

When organizations face such threats, the publication of stolen data can facilitate secondary attacks, such as targeted phishing campaigns or social engineering directed at the individuals whose information was leaked. To address the aftermath of such a breach, organizations typically need to initiate a comprehensive forensic investigation to determine the exact nature and extent of the compromised data and to identify the entry point used by the attackers.