B... law: leakeddata ransomware group claims victim listing on its leak site
The leakeddata ransomware group claims a victim named only B... law on its leak site, per RansomLook. If you work with such a firm, watch for its own
- Published
- Ecosystem
- Enterprise software
- Exploitation
- Not confirmed, the only evidence is a leak-site listing tracked by RansomLook, with no victim statement or independent verification
What happened
According to the ransomware tracker RansomLook, the leakeddata ransomware group added an entry titled “B... law” to its leak site on 2026-11-06. RansomLook records the entry’s description as “To be announced...”.
This is a claim made by the group. It is not a confirmed breach. The listing as recorded does not give the full victim name. It also does not describe any data, data volume, entry point or demand. No source shows that the victim has confirmed an incident, and no independent outlet has reported on it.
RansomLook’s page for the group lists many other recent entries (RansomLook). Many of them name law firms, and several are also partially masked and marked “To be announced...”. That pattern is context about the group’s listings. It does not tell us anything about this specific claim.
Am I affected?
Not confirmed. The victim’s identity is masked in the listing. The following are all unknown from the sources:
- Which organisation “B... law” refers to
- Whether any data was taken
- What kind of data it would be
- Whether clients or third parties are involved
What to do now
- Do not try to guess the victim from the masked name or act on speculation. The sources do not identify the organisation.
- If a law firm you work with contacts you about a security incident, follow that firm’s guidance and check that the notice is genuine through a channel you already know.
- Check back with the RansomLook entry for updates. It currently says only “To be announced...”.