Primius Law Firm listed on dragonforce ransomware leak site

• Ransomware group: dragonforce
• Country: Greece
• Sector: Professional Services
• Announcement date: April 22, 2026

Dragonforce claims data breach at Primius Law Firm

The ransomware group known as dragonforce has listed the Greek-based Primius Law Firm on its dedicated leak site. According to the announcement made on April 22, 2026, the threat actor group claims to have successfully exfiltrated a significant volume of data belonging to the legal organization.

The group, which first emerged in 2023, has gained notoriety for its specific operational model. Unlike some monolithic ransomware operations, dragonforce is known for providing branding and the necessary infrastructure to various affiliates. This model allows multiple actors to conduct attacks under a unified banner, which can lead to an increase in the frequency and variety of attacks targeting different sectors.

The listing appeared on the group's platform alongside details regarding the firm's operations and contact information. Such announcements are a common tactic in modern ransomware campaigns, often serving as a method of public pressure to force victims into meeting ransom demands.

Details of the alleged data theft

While the group has publicly announced the breach, the specific nature of the stolen information remains unclear. The announcement provides details regarding the scale of the theft but lacks granular specifics regarding the file types or the specific contents of the compromised directories.

• The group claims to possess 71.93 GB of data belonging to the firm.

The provided documentation and screenshots associated with the leak do not contain a list of sample files, nor do they specify the exact categories of information that were targeted during the intrusion. Consequently, the exact contents of the 71.93 GB of data remain unknown at this time.

About Primius Law Firm

Primius Law Firm is a modern law firm based in Greece. The organization provides holistic solutions for a wide range of legal issues, serving both individuals and businesses. With a team of experienced professionals, the firm offers legal representation and expert advice to its diverse client base.

Potential implications and risks

The targeting of a law firm presents unique challenges and significant risks for both the organization and its clients. Because law firms are responsible for handling highly sensitive client information and protecting trade secrets, a data leak of this nature can lead to severe privacy breaches. For the clients of the firm, such an incident may result in substantial reputational damage.

Given that the firm operates within Greece, this incident may result in legal consequences under the EU General Data Protection Regulation (GDPR), which mandates strict protections for personal data. Furthermore, the leaked information could be utilized by malicious actors for secondary risks, such as identity theft or highly targeted phishing attacks against the firm's associates or clients.

In the broader context of cybersecurity, ransomware groups often employ a "double extortion" strategy. In this model, attackers not only encrypt the victim's systems to disrupt operations but also steal sensitive data to threaten its public release. This increases the pressure on the organization's operational continuity. To defend against such threats, organizations in the professional services sector typically focus on robust data encryption, strict access controls, and comprehensive employee training to recognize social engineering attempts.