On May 28, 2026, the Genesis ransomware group claimed a direct attack on Peña & Bromberg, a legal firm. The group announced its intent to leak "sensitive client data." No official statement has been issued by Peña & Bromberg regarding the incident.
The specific types of data exposed, the number of individuals affected, and the states impacted have not been publicly disclosed. It remains unclear if sensitive data such as SSN, medical, or financial information was involved. No official breach notification letter has been issued yet, nor have any state Attorney General filings been reported.
Details can emerge later as investigations progress, and official notices may be delayed.