OAB listed on Inc Ransom leak site

• Ransomware group: Inc Ransom
• Country: Brazil
• Sector: Professional Services
• Announcement date: January 23, 2026

The Inc Ransom group has listed the OAB, the São Paulo section of the Brazilian Bar Association, on its leak site. The threat actor group claims to have successfully breached the organization's digital infrastructure, resulting in the acquisition of sensitive information belonging to the institution.

The alleged breach and claims by Inc Ransom

According to the announcement posted on the group's leak platform on January 23, 2026, Inc Ransom alleges that they have gained unauthorized access to the digital infrastructure of the OAB. The group claims that this access allowed them to obtain sensitive data belonging to the organization. This type of announcement is a common tactic used by ransomware groups to pressure victims into paying ransoms through the threat of public data exposure.

Ransomware leak sites serve as a public stage for cybercriminals to showcase their targets and the data they have stolen. This practice is often part of a "double extortion" strategy. In such scenarios, attackers do not merely encrypt an organization's files to disrupt operations; they also steal sensitive data to use as leverage. If the victim refuses to pay the ransom to restore their systems, the attackers threaten to leak the stolen information on these public platforms, causing significant reputational and legal damage.

Data samples and affected information

The information provided by the threat actor includes visual evidence of the alleged theft. Screenshots have been released that display various samples of documents. These samples include identification cards, personal photographs, and various lists that the group claims are part of the stolen dataset.

Based on the available information, the following types of data are reported to be affected:

• Identity information
• Personal photographs

While the specific volume of the data or the total number of files stolen has not been disclosed by the group, the presence of identity documents and personal imagery suggests a high level of sensitivity regarding the information involved.

About the OAB

The OAB-SP is the São Paulo chapter of the Brazilian Bar Association. It serves as an official professional organization that represents lawyers and is responsible for regulating professional standards within the region. The institution plays a vital role in the legal community by providing various professional services to legal practitioners. These services include digital certification, access to library resources, and various forms of legal support for practitioners in the area.

Potential impact and security considerations

The alleged leak of such sensitive information poses significant risks to the organization's members and the individuals who utilize its services. The exposure of identity information and personal photographs can increase the risk of identity theft and fraudulent activities targeting the affected individuals. Furthermore, given the double-extortion tactics frequently employed by groups like Inc Ransom, there is a possibility that the leaked data could be further exposed or utilized in future targeted phishing attacks.

From a regulatory perspective, the organization may face specific legal challenges. Under the LGPD (Lei Geral de Proteção de Dados) regulations in Brazil, the organization may be subject to data breach notification obligations. The sensitivity of the data, combined with the organization's role within the professional services sector, makes the potential legal consequences and the impact of the breach particularly critical.

For organizations operating in the professional services sector, maintaining robust cybersecurity postures is essential to mitigate these risks. Common defensive measures include implementing multi-factor authentication, maintaining regular offline backups, and conducting thorough employee training to recognize phishing attempts. Additionally, ensuring compliance with regional data protection laws is a critical component of managing the legal risks associated with potential data breaches.