Skip to content
Ransomware

MBM Intellectual Property Law listed on interlock ransomware leak site

Canada-based MBM Intellectual Property Law firm has been listed on the leak site of the interlock ransomware group.

By
Siberpol Intelligence Unit
Published
2 min read
2 min read
  • Ransomware group: interlock
  • Country: Canada
  • Sector: Professional Services
  • Announcement date: August 11, 2025

Interlock ransomware group claims data breach at MBM Intellectual Property Law

The interlock ransomware group has officially listed the Canadian law firm MBM Intellectual Property Law on its dedicated leak site. According to the announcement made on August 11, 2025, the threat actor group claims to have successfully exfiltrated data from the firm's network. This development follows a common pattern in modern cyberattacks where ransomware groups employ double extortion tactics, threatening to release sensitive information on public forums if their demands are not met.

The claim of a breach was accompanied by evidence intended to validate the group's assertion. The attackers provided a directory listing of files that they allege were stolen from the firm's internal systems. This type of public shaming is a central component of ransomware operations, designed to maximize pressure on the victim organization by exposing their data to the public eye.

Details of the alleged data exfiltration

Based on the screenshots provided by the interlock group, the stolen information appears to be organized into several specific directories. The visual evidence shared by the attackers shows folders labeled as 'ClientFiles', 'ClosedFiles', and 'Mailbox Database'. These directories suggest that the breach may have targeted a wide range of historical and active records maintained by the firm.

The content allegedly exfiltrated from the network includes a variety of sensitive materials. According to the evidence provided, the data involves:

  • Client files
  • Mailbox databases
  • Database records

The group has not provided specific information regarding the total size of the data stolen or the specific number of files involved in the incident. Additionally, no ransom demand has been publicly disclosed by the group in the current listing.

About MBM Intellectual Property Law

MBM Intellectual Property Law is a professional services firm based in Canada. The organization specializes in the field of intellectual property law, offering a range of legal services to its clients. Their expertise includes providing strategic advice and litigation services concerning various legal protections, such as patents, trademarks, industrial designs, and copyrights.

Risk assessment and industry implications

This incident presents a high potential risk due to the nature of the data allegedly accessed at a specialized law firm. Because the firm handles sensitive client information, intellectual property rights, and strategic advisory documents, the leaked data could potentially be leveraged for secondary attacks or corporate espionage. The exposure of such high-value information poses a significant threat to the privacy and competitive advantages of the firm's clients.

From a regulatory and legal perspective, the incident may bring scrutiny to the firm's data security practices. In Canada, organizations are subject to the Personal Information Protection and Electronic Documents Act (PIPEDA), and failures in protecting sensitive data can lead to potential legal consequences. Furthermore, the breach could have a profound impact on the firm's reputation, particularly when considering the fundamental principles of client confidentiality and attorney-client privilege.

While public information regarding the interlock group remains limited, this event highlights the ongoing risks faced by professional services sectors. Organizations in this sector often implement defensive measures such as multi-factor authentication, regular security audits, and robust encryption to mitigate these threats. However, as seen in this case, the targeting of legal professionals remains a significant concern for the cybersecurity community.

From the Essential plan

Infostealer Detection

See your firm's attack surface on one screen: how many findings, at which severity, on which domain.

Related stories