Martin, Cukjati & Tom, LLP targeted by Inc Ransom in alleged data breach

• Ransomware group: Inc Ransom
• Country: United States
• Sector: Financial Services
• Announcement date: March 2, 2026

Inc Ransom claims data breach at Martin, Cukjati & Tom, LLP

The ransomware group known as Inc Ransom has listed the law firm Martin, Cukjati & Tom, LLP on its dedicated leak site. According to the announcement made on March 2, 2026, the threat actors claim to have accessed and stolen sensitive information belonging to the organization. This development suggests a targeted cyber security breach aimed at the institution's operations and data repositories.

The group appears to be employing a double extortion tactic in this incident. In a typical double extortion scheme, threat actors do not merely encrypt an organization's systems to disrupt operations; they also exfiltrate sensitive data before the encryption occurs. The threat actors then threaten to publish this stolen information on a public leak site if their demands are not met. This method increases the pressure on the victim by leveraging the threat of reputational damage and regulatory penalties resulting from the public exposure of private information.

Details of the alleged data exposure

While the specific volume of the stolen data and the total file count have not been disclosed by the group, the contents of the leak have been partially revealed through screenshots. The information allegedly stolen from the firm's systems appears to include highly sensitive documents that could be used for identity theft or other malicious activities. The leaked materials reportedly include:

• Driver's licenses
• Health insurance information
• Medical records

The presence of such specific documentation, particularly medical and identification records, indicates that the breach may have access to highly confidential client files. Such a leak poses a significant risk to the individuals whose information is contained within these documents, as it provides attackers with the necessary components for identity fraud.

About Martin, Cukjati & Tom, LLP

Martin, Cukjati & Tom, LLP is a full-service law firm located in the United States. The firm possesses over 75 years of combined experience and is known for representing both individuals and businesses in high-stakes litigation. The firm maintains a specific operational model by keeping a limited caseload, which allows them to provide personalized legal services and dedicated attention to a select group of clients.

Implications and industry considerations

The alleged leak of this data carries heavy implications for the legal sector. Given the nature of the organization, the breach could potentially compromise client confidentiality and the fundamental principle of attorney-client privilege. When a law firm's data is exposed, the trust established between the legal counsel and the client is placed at significant risk.

Furthermore, because the firm is a US-based entity, the exposure of medical and health insurance information may trigger regulatory scrutiny under HIPAA and other relevant state laws regarding data protection. Organizations handling such sensitive information are often required to follow strict compliance frameworks to safeguard personal data.

The use of double extortion by groups like Inc Ransom often facilitates subsequent targeted phishing attacks. Once attackers possess a database of names, medical details, and identification numbers, they can craft highly convincing social engineering campaigns to target the affected individuals or the organization itself. This secondary wave of attacks can lead to further operational disruptions and long-term reputational damage. To mitigate such risks, organizations in the financial and legal sectors typically focus on robust data encryption, strict access controls, and comprehensive employee training to defend against the evolving tactics of ransomware groups.