Falcon ransomware group claims 260 GB theft from Buchanan Ingersoll law firm
The Falcon ransomware group listed the Pittsburgh law firm Buchanan Ingersoll & Rooney on its leak site and claims a 260 GB extraction, including a full Microsoft Dynamics CRM export with account and contact records. The firm has not confirmed the incident and the data has not been verified. Clients should watch for firm-themed phishing, fake invoices and payment-change requests.
What happened
The Falcon ransomware group listed the Pittsburgh law firm Buchanan Ingersoll & Rooney on its leak site. The group claims a 260 GB extraction, including a full Microsoft Dynamics CRM export with account and contact records. The firm has not confirmed the incident and the data has not been verified.
Why it matters
If confirmed, the leak could expose client relationships, matter contacts and deal pipelines. Such data enables targeted phishing and extortion of the firm's clients. According to DailyDarkWeb, Falcon has repeatedly targeted US law firms, including Weitz & Luxenberg and Beasley Allen.
What to do
Watch for official statements from the firm and check which company data is at risk. Warn staff and clients about firm-themed phishing, fake invoices and payment-change requests. Confirm through a known channel before approving any banking change.
For the technical team
- Affected
- Sistemas internos do escritório de advocacia Buchanan Ingersoll & Rooney, sediado em Pittsburgh (EUA); alegada extração · Internal systems of Buchanan Ingersoll & Rooney; alleged full Microsoft Dynamics CRM export with account and contact records.
- Exploitation
- Unverified claim by the Falcon group on its leak site, reported by DailyDarkWeb. The firm has not confirmed the incident and the data has not been verified.
- Fix
- Not applicable; no software fix involved.
- More details
- Alleged volume: 260 GB (182 GB compressed). According to DailyDarkWeb, Falcon has previously listed other US law firms, including Weitz & Luxenberg and Beasley Allen. A law firm CRM export can expose client relationships and support phishing and extortion.
Timeline
Falcon group listed the firm on its leak site claiming a 260 GB extraction; the incident remains unconfirmed.
Sources 1 source
- @DailyDarkWeb @DailyDarkWeb



