In May 2026, the Incransom ransomware group claimed responsibility for an attack on Lopez Law FL, a legal services firm. The group stated they exfiltrated "full data" and "substantial amounts of sensitive data" from the firm. This incident is currently categorized as a threat-actor claim, and no official breach notice from Lopez Law FL, state Attorney General filings, or court filings have been found to independently confirm the breach or provide details.
The specific types of data exposed, the number of individuals affected, and the states impacted remain unconfirmed by an official source. There is no evidence of medical, financial, or Social Security number data being compromised, nor have any state AG filings or class-action lawsuits been identified. The company does not appear to be publicly traded, and there is no indication that this was a vendor breach affecting multiple clients.
It is important to note that details regarding data breaches can emerge over time, and official notifications may be delayed. Further investigation into regulatory filings, court documents, and company disclosures would be needed to confirm the extent and nature of this incident.