Nicholson y Cano Abogados listed on dragonforce ransomware leak site

• Ransomware group: dragonforce
• Country: Argentina
• Sector: Professional Services
• Announcement date: July 13, 2026

The Argentina-based law firm Nicholson y Cano Abogados has been listed on the leak site of the ransomware group known as dragonforce. This announcement, made by the threat actor, suggests that the firm may have fallen victim to a cyberattack resulting in a data breach.

The claims made by dragonforce

On July 13, 2026, the dragonforce group published an official announcement on their dedicated leak site. In this notice, the group listed Nicholson y Cano Abogados, claiming that they have successfully gained access to the firm's data. The publication of such a notice on a ransomware leak site typically indicates that a security breach may have occurred within the organization's digital infrastructure.

Ransomware groups often utilize these leak sites as a tool for extortion. In many modern cyberattacks, groups employ a tactic known as double extortion. In this scenario, attackers do not merely encrypt an organization's files to disrupt operations; they also exfiltrate sensitive information before the encryption occurs. The threat of releasing this stolen data publicly serves as additional leverage to pressure the victim into paying a ransom. While the specific details of the intrusion remain unconfirmed, the listing itself represents a significant escalation in the threat profile of the organization.

Information regarding the alleged data breach

Regarding the specifics of the incident, the group has not provided detailed information or screenshots concerning the content of the data they allegedly leaked. At this time, there is no information available regarding the total size of the data or the specific number of files involved in the incident. Furthermore, the group has not issued a ransom demand in the current announcement.

• No specific data types were named in the listing.

About Nicholson y Cano Abogados

Nicholson y Cano Abogados is a leading full-service law firm based in Argentina. Founded in 1976, the firm has established a long-standing presence in the legal sector. It provides strategic legal solutions to a diverse range of clients, including both local and international entities, across 20 different practice areas.

Risk assessment and industry implications

This incident may pose a high risk due to the sensitive client information typically held by law firms. The allegedly leaked data could lead to breaches of attorney-client privilege and expose third parties to targeted phishing attacks. Under Argentine data protection regulations, the firm may face legal liabilities, which could potentially result in significant reputational damage.

Information regarding the dragonforce group remains limited; however, the group is known to engage in data extortion activities. Secondary risks associated with this type of breach may include the use of leaked data for further extortion or the potential sale of information on underground forums. When sensitive legal documents are compromised, the impact extends beyond the immediate organization to include all clients whose confidentiality may have been breached.

For organizations operating in the professional services sector, such incidents highlight the necessity of robust cybersecurity postures. Common defensive steps for organizations include implementing multi-factor authentication, maintaining rigorous patch management schedules, and conducting regular security awareness training for staff to mitigate the risk of initial access via phishing. Additionally, maintaining offline, immutable backups and implementing strict network segmentation can help limit the lateral movement of attackers and the potential impact of a successful breach.