Pinto Coates Kyre & Bowers data allegedly leaked by Interlock ransomware group

• Ransomware group: Interlock
• Country: Australia
• Sector: Professional Services
• Announcement date: November 3, 2025

Interlock claims a breach of Pinto Coates Kyre & Bowers

The Interlock ransomware group has published an announcement on their leak site claiming to have targeted the US-based law firm Pinto Coates Kyre & Bowers. According to the group's claim, the breach occurred on November 3, 2025. The threat actors allege that they successfully gained access to confidential information by exploiting the security vulnerabilities present within the firm's infrastructure.

Ransomware attacks often involve a tactic known as double extortion, where attackers not only encrypt an organization's data to disrupt operations but also steal sensitive information to use as leverage. By threatening to release stolen data on public leak sites, attackers aim to pressure victims into paying a ransom to prevent the exposure of proprietary or confidential information. In this instance, the group has released a screenshot as evidence of the alleged intrusion.

The provided screenshot displays a directory structure that suggests a significant volume of data has been compromised. The group claims that the total size of the data involved in this incident is approximately 859.5 GB. No specific ransom demand has been disclosed in the announcement, and the exact number of files involved remains unknown.

The scope of the alleged data exposure

The leaked information, as represented by the group's provided screenshot, appears to include various folders that may contain sensitive organizational and client-related data. The directory structure visible in the evidence includes folders labeled 'Companies', 'Beth Leatherman', 'Closed Files', 'FirmFold', 'FirSD', 'Matthew Bowers', and 'Open Files'. These folders likely contain a mix of historical and active files essential to the firm's operations.

Based on the folder names and the nature of the targeted entity, the data allegedly stolen includes:

• Client files
• Legal documents
• Corporate operational data

The exposure of such information can lead to various secondary risks. For example, if personal information belonging to clients is leaked, it could lead to identity theft or the execution of highly targeted phishing attacks against the individuals involved.

The profile of Pinto Coates Kyre & Bowers

Pinto Coates Kyre & Bowers is a law firm based in Greensboro, North Carolina. The firm specializes in defending individuals and corporations, as well as representing claimants in various legal matters.

Implications and organizational risks

The alleged breach poses a significant risk due to the sensitive nature of the information typically handled by a legal practice. Because the firm manages information protected by attorney-client privilege, the potential exposure of these files is highly critical. As a US-based entity, the incident may lead to legal consequences under state-level data protection laws and may involve complex professional ethical obligations regarding the protection of client confidentiality.

Beyond the immediate legal and ethical concerns, the incident may have negative impacts on the firm's operational continuity and professional reputation. For professional service firms, maintaining client trust is a cornerstone of their business model, and a significant data leak can undermine that trust significantly.

To defend against such threats, organizations in the professional services sector often implement various defensive measures. These include robust multi-factor authentication (MFA) across all remote access points, regular security awareness training for employees to recognize phishing attempts, and comprehensive encryption for data both at rest and in transit. Furthermore, maintaining regular, offline backups and conducting frequent vulnerability assessments can help organizations identify and mitigate security gaps before they can be exploited by ransomware groups.