Rella Associates allegedly targeted by insomnia ransomware group

• Ransomware group: insomnia
• Country: United States
• Sector: Professional Services
• Announcement date: February 7, 2026

Rella Associates listed on insomnia leak site

The law firm Rella Associates has reportedly been targeted in a cyberattack, according to an announcement made by the ransomware group known as insomnia. The group has listed the organization on its dedicated leak site, alleging that they have successfully compromised the firm's data. This development follows a pattern often seen in modern cybercrime, where threat actors use public platforms to pressure victims by threatening the release of stolen information.

In many such instances, ransomware groups employ a strategy known as double extortion. This method involves not only encrypting an organization's internal systems to disrupt operations but also exfiltrating sensitive data before the encryption occurs. The threat actors then threaten to publish this stolen information on a leak site if their demands are not met. This tactic significantly increases the pressure on the victim, as the exposure of confidential data can lead to severe legal, regulatory, and reputational consequences that persist long after the initial technical disruption is resolved.

The alleged cyberattack and claims by insomnia

According to the claims made by the insomnia group, the breach occurred following a cyberattack that allegedly took place on December 4, 2025. The group has since published an announcement on their leak platform, which includes various samples of documents that they claim belong to Rella Associates. These samples are intended to demonstrate the validity of the breach and the nature of the stolen information.

The group's public announcement serves as a method of verification and intimidation. By providing snippets of data, the attackers attempt to prove they have successfully bypassed the target's security measures. While the specific methods used to gain access have not been detailed in the public announcement, the presence of the firm on a ransomware leak site indicates a significant security incident has been claimed by the threat actor.

Data involved in the alleged breach

The information allegedly stolen from Rella Associates is highly sensitive, given the nature of the firm's legal work. The leaked data, as represented by screenshots provided by the attackers, includes various legal documents, petitions, and confidential settlement agreements. The specific types of data identified in the listing include:

• Client personal information
• Legal case files
• Social security records
• Settlement agreements

The exposure of such data can have profound implications for the individuals involved, as it often contains private details required for legal proceedings and government benefits.

About Rella Associates

Rella Associates is a law firm based in Sleepy Hollow, New York. The firm provides specialized legal assistance in several key areas, including workers' compensation, social security disability, and NYCERS for work-related injuries and illnesses. The firm is known for offering personalized legal representation services to its clients.

Potential consequences and industry implications

The breach of a law firm presents unique risks due to the sensitive nature of the information handled by legal professionals. The exposure of the data claimed by insomnia could lead to the disclosure of highly private personal and medical information belonging to the clients of Rella Associates. Such information is particularly valuable to malicious actors for purposes such as identity theft and highly targeted phishing attacks, where attackers use specific personal details to gain the trust of the victim.

Furthermore, because Rella Associates is a United States-based entity, the firm may face significant legal consequences regarding data privacy violations under relevant state laws and federal regulations. Beyond regulatory scrutiny, the breach of attorney-client privilege represents a critical risk that could result in substantial reputational damage and professional liability for the firm. Maintaining the confidentiality of client communications is a cornerstone of legal practice, and a breach of this nature can undermine the trust essential to the attorney-client relationship.

For organizations operating within the professional services sector, such incidents underscore the necessity of robust cybersecurity frameworks. Defensive measures typically include implementing multi-factor authentication, maintaining rigorous patch management schedules, and conducting regular security awareness training for employees. Additionally, organizations often employ advanced monitoring tools to detect unauthorized access and data exfiltration attempts in real-time. As information regarding the specific capabilities and motives of the insomnia group remains limited in the public domain, organizations are encouraged to maintain a high state of vigilance against such threats.