Studio Legale Tisot Iuris listed on Everest ransomware leak site

• Ransomware group: Everest
• Country: Italy
• Sector: Professional Services
• Announcement date: September 15, 2025

Everest ransomware group claims breach of Studio Legale Tisot Iuris

The threat actor known as Everest has listed Studio Legale Tisot Iuris on its dedicated leak site, alleging that the organization has suffered a data breach. This announcement, which appeared on the group's portal, marks a new instance of targeted activity against professional service providers. While the listing confirms the group's intent to publicize the incident, the specific details surrounding the attack remain limited at this stage.

Details of the alleged attack

According to the announcement made on September 15, 2025, the Everest group claims to have successfully compromised the data belonging to Studio Legale Tisot Iuris. The group's claim of a successful breach was posted on the same day the incident was allegedly identified. However, public information regarding the Everest group remains limited, making it difficult to ascertain their full operational scope or specific technical methodologies.

Ransomware groups often utilize leak sites as a tool for double extortion. In these scenarios, attackers do not merely encrypt an organization's systems to disrupt operations; they also exfiltrate sensitive information to use as leverage. By threatening to publish stolen data on a public forum, the threat actors attempt to pressure the victim into paying a ransom to prevent the exposure of confidential information. This method increases the pressure on the target, as the consequences of a leak often extend far beyond immediate operational downtime.

Information regarding the leaked data

At this stage, there is no information available regarding the nature or the specific content of the allegedly leaked data. Although the organization's name is clearly visible in the provided screenshot on the leak site, no specific descriptions of the leaked files have been provided by the attackers. Furthermore, no samples of the data have been released to verify the claims made by the group.

The listing currently names no specific data types or file categories involved in the alleged breach.

About Studio Legale Tisot Iuris

Studio Legale Tisot Iuris is a law firm based in Milan, Italy. The firm provides a variety of legal consultancy services, specializing in several key areas of law. Their professional expertise includes commercial law, corporate law, and contract law.

Risk assessment and implications

This incident suggests that the organization's sensitive client or operational data may be at risk. Because the organization is based in Italy, a potential data breach could lead to significant legal sanctions under the General Data Protection Regulation (GDPR). The regulatory framework in the European Union imposes strict requirements on how sensitive personal data must be protected and how breaches must be reported.

Given the threat actor's past methods, there is a possibility of data publication or extortion attempts. If the attackers follow their typical patterns, the organization may face the risk of its data being released publicly to maximize pressure for payment. Beyond the immediate threat to the firm, secondary risks may emerge for the organization's clients, such as identity theft or targeted phishing attacks. When professional services firms are targeted, the stolen information often contains sensitive client details that can be used to launch more sophisticated social engineering campaigns against those clients.

For organizations operating in the professional services sector, maintaining robust cybersecurity postures is essential. Defensive strategies typically involve implementing multi-factor authentication, maintaining regular offline backups, and conducting continuous monitoring of network traffic to detect unauthorized data exfiltration. Furthermore, ensuring compliance with regional data protection laws is a critical component of risk management in the event of a potential compromise.