On March 6, 2026, the New Hampshire law firm Abramson Brown & Dugan appeared on the leak site of the incransom ransomware group. The firm, which specializes in medical malpractice and personal injury cases, is claimed to have had internal files exfiltrated during a ransomware attack. With roughly 20 employees and annual revenue of about $5 million, the breach potentially exposes sensitive client records that contain names, medical histories, accident details, and legal correspondence.
Already exposed?
You can’t unleak data. You can take away what it’s worth.
A leaked record is where it starts, not where it ends. What turns it into your front door is the look-up sites publishing your address beside your name — and those are what an AI reads when somebody asks about you. The free scan shows you both. We write to 580 companies.
See what is exposed about you — free scan →Watch arbd.com
Get alerted the next time arbd.com files a breach with any US regulator — the filing, dated and sourced. A free single-company slice of Signals; no account needed.
We’ll email you only about arbd.com’s future breach filings and how to watch a whole vendor list — not general marketing. Unsubscribe any time.
Watching your whole vendor list (50 to 500 companies, by tier) is GalaxyWarden Signals.
What Public Reporting Shows
Public reporting indicates that incransom listed arbd.com as a victim and posted samples of stolen data. The firm has not yet issued a public statement confirming the timeline of the intrusion or the exact volume of records taken. Available reporting describes the exposed material as internal files rather than a structured database of customer information, though the content likely includes documents that identify clients by name and case details. No confirmed count of affected individuals has been released.
Why This Matters for You and Your Family
If you or a family member worked with Abramson Brown & Dugan after an injury or medical procedure, your personal health information and legal records may now sit on a ransomware leak site. That data can be used to file fraudulent insurance claims, open accounts in your name, or pressure you with threats of public embarrassment. Even if you were never a client, the breach shows how small professional-service firms that hold intimate details about ordinary families remain prime targets. Once files leave the firm’s control, you lose the ability to limit who sees them or how they are used.
The Doxxing and Identity-Chain Risks
Legal-case files often contain not just names and addresses but phone numbers, email accounts, insurance IDs, and sometimes Social Security numbers. Attackers can chain these pieces together with information from earlier breaches to build a complete profile. A single leaked medical-malpractice document can link your work email to your home address, your child’s school records, and family photos. That chain turns a simple breach into repeated harassment, SIM-swapping attempts, or targeted scams. Credential leaks like this one also cascade into account takeovers on gaming platforms, exposing children’s usernames, chat logs, and linked family payment methods.