PK Pinhão & Koiffman Attorneys at law targeted by Inc Ransom

• Ransomware group: Inc Ransom
• Country: Brazil
• Sector: Professional Services
• Announcement date: January 30, 2026

Inc Ransom claims data breach at PK Pinhão & Koiffman Attorneys at Law

The ransomware group known as Inc Ransom has listed the Brazilian law firm PK Pinhão & Koiffman Attorneys at Law on its leak site. According to the group's announcement, the breach involves a significant volume of stolen information, with the threat actor claiming to have exfiltrated 100 GB of data from the organization.

Details of the claimed attack

The incident was officially announced by the Inc Ransom group on January 30, 2026. The group claims that the attack occurred on the same day, January 30, 2026. Through their leak portal, the threat actors allege that they have successfully compromised the firm's internal systems to access sensitive information. The announcement specifically claims that the breach includes the firm's operational and financial data, as well as critical client information.

Ransomware groups often utilize a tactic known as double extortion. In this method, attackers not only encrypt an organization's files to disrupt operations but also steal sensitive data before encryption. The threat actors then threaten to publish this stolen information on public leak sites if a ransom is not paid. This approach is designed to exert maximum pressure on the victim by leveraging the threat of public exposure and regulatory scrutiny.

Data types involved in the leak

The information allegedly stolen by Inc Ransom is quite diverse, encompassing various aspects of the law firm's business and legal operations. The group has provided screenshots that appear to display various documents and tables belonging to the firm. The data types mentioned in the leak include:

• Client data
• Financial data
• Non-disclosure agreements (NDA)
• Corporate data

Beyond these specific categories, the group claims the leak contains confidential documents, business agreements, development files, and operational records.

About PK Pinhão & Koiffman Attorneys at Law

PK Pinhão & Koiffman is a professional services firm based in Brazil. The firm specializes in several complex legal areas, including technology, innovation, digital law, and corporate law. They provide a wide range of legal consulting services to both medium and large-sized companies. Their expertise covers critical business functions such as family business planning, contracts, compliance, and fintech-related legal matters.

Risk assessment and industry implications

This incident may pose a high risk due to the sensitive client information typically held by law firms. The disclosure of such data could lead to violations of client confidentiality and potential legal sanctions under Brazil's LGPD. The exposure of financial data and business agreements may damage the firm's commercial reputation and create secondary risks such as targeted phishing attacks.

Given the firm's focus on the technology and fintech sectors, it is possible that the leaked data could also impact supply chain security. When a service provider in a specialized sector is compromised, the breach can have ripple effects across their client base, potentially exposing the interconnected networks of various companies.

To defend against such threats, organizations in the professional services sector can implement several defensive measures. These include maintaining robust backup solutions that are isolated from the main network, implementing multi-factor authentication (MFA) across all access points, and conducting regular security awareness training for employees to recognize phishing attempts. Furthermore, continuous monitoring of network traffic and strict access controls can help detect and mitigate unauthorized data exfiltration attempts before they reach a critical scale.