RansomHub ransomware group lists www.nola-law.com on its leak site

• Ransomware group: RansomHub
• Country: United States
• Sector: Professional Services
• Announcement date: February 21, 2025

RansomHub claims a data breach at Nola Law

The ransomware group known as RansomHub has published an announcement on its leak site claiming to have stolen data belonging to the law firm Nola Law. According to the post, the threat actors managed to exfiltrate information directly from the institution's network. The announcement was made on February 21, 2025, following an alleged attack that occurred on February 17, 2025.

RansomHub's publication includes various file directories and document samples that the group claims were obtained from the law firm's servers. The group has provided a significant volume of files, specifically claiming to have access to 149,519 files. While the group has released these samples to demonstrate the breach, they have not specified a ransom demand or the total size of the stolen data.

Details of the claimed data exfiltration

The information released by the threat actor suggests a significant compromise of sensitive documentation. Based on the screenshots and samples provided by RansomHub, the leaked content appears to include highly confidential materials used in legal proceedings and medical assessments. Specifically, the samples show patient radiology reports, court petitions, and various forms of law firm correspondence.

The types of data identified in the leak include:

• Patient health records
• Law firm case files
• Personally identifiable information

The presence of such diverse data types indicates that the breach may have touched multiple facets of the firm's operations, from client medical histories to active litigation documents.

About Nola Law

Nola Law is a professional services firm located in Louisiana, United States. The organization provides a variety of legal consulting and representation services to its clients. Their practice areas specifically include personal injury, car accidents, and insurance litigation.

Analysis and potential impact

The claims made by RansomHub pose a significant risk regarding the exposure of sensitive health and legal data belonging to the firm's clients. Because Nola Law is based in the United States, this incident may trigger legal processes under relevant state laws and HIPAA regulations due to the nature of the sensitive information involved.

The specific content shared by the attackers, such as radiology reports and case files, could potentially be utilized by malicious actors for identity theft or targeted phishing attacks against the firm's clients. RansomHub has a history of employing secondary extortion methods, which often involves threatening to release sensitive data if a ransom is not paid, even after initial encryption has been addressed.

For organizations in the professional services sector, particularly those handling sensitive client information, such incidents highlight the critical importance of robust cybersecurity frameworks. Defensive measures typically include implementing multi-factor authentication, maintaining rigorous patch management, and ensuring comprehensive encryption for data both at rest and in transit. Furthermore, organizations must be prepared for the reputational damage and the failure to meet client confidentiality obligations that often follow such high-profile data leaks. At this time, public information regarding the specific operational details of the RansomHub group remains limited.