aw-lawyers.com Listed by lockbit3 Ransomware Group

Amsellem & Weitz, a French law firm operating as aw-lawyers.com, was listed on the LockBit 3.0 ransomware leak site on December 08, 2023. The listing states that the firm suffered a ransomware attack in which attackers exfiltrated internal files, including what the group claims is approximately 100 GB of client data. The disclosure indicates the firm provides legal advice and representation in real estate, civil, commercial matters, and court defense. The exact number of affected individuals remains unknown, as neither the leak-site posting nor any subsequent company notification has quantified the impacted records.

Details in the Leak-Site Listing

The primary disclosure on the LockBit 3.0 leak site explicitly states that internal files were exfiltrated during a ransomware attack. It describes Amsellem & Weitz as a firm that assists clients before legal procedures and offers representation in real estate, civil, and commercial transactions. The posting includes a partial sample of the claimed data and sets a publication deadline typical of the group’s extortion model. Public reporting on LockBit 3.0 indicates the listing does not detail every file type taken, only that the volume reaches roughly 100 GB and centers on client-related material. No official breach notification from the firm had appeared in regulator filings or direct client communications at the time the listing went live.

Why This Matters for You and Your Family

When a law firm’s client files are stolen, the exposure goes far beyond the company itself. If you or any member of your family has ever used Amsellem & Weitz for real estate closings, civil disputes, commercial contracts, or court representation, your personal information, financial details, and case notes may now sit on a criminal server. Client files from law firms routinely contain full names, addresses, dates of birth, tax identifiers, bank account numbers, and correspondence that can be used for identity theft or targeted fraud. Even if the exact number of records is not public, the nature of legal work means a single compromised file can expose an entire household’s sensitive history.

The Doxxing and Identity-Chain Risk

Stolen legal documents create long-term doxxing chains. Attackers can link your real name and address to email accounts, phone numbers, and online handles that appear in correspondence or exhibits. Once those connections are mapped, criminals can pursue account takeovers across banking, government portals, and social media. Credential leaks of this type frequently cascade into gaming accounts belonging to you or your children, especially when family members share passwords or recovery email addresses. The result is a widening web of exposure that can surface months or years later in fraud, blackmail, or physical stalking.

LockBit 3.0’s Known Track Record

Public reporting attributes the LockBit ransomware operation to a group that first emerged in 2019 and rebranded as LockBit 3.0 in early 2023. The gang has hit hospitals, manufacturers, financial firms, and professional-services organizations worldwide. Their typical playbook begins with initial access gained through compromised credentials or vulnerable remote-desktop services, followed by rapid lateral movement, data exfiltration, and deployment of ransomware. After encryption they demand payment and, if unpaid, publish samples on their leak site to pressure victims. The group’s leak sites have historically listed hundreds of organizations, and many of those postings ultimately led to full data dumps when negotiations failed.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, with cleanup handled by the service.
• Rotate any password you ever used at aw-lawyers.com or related domains and enable 2FA through an authenticator app everywhere that password was reused.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure surfaces in hours rather than months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts that often chain back to the same addresses and credentials.
• Let remediation specialists perform hands-on takedown requests across data brokers and extortion sites on your behalf.

The incident underscores how quickly professional-services data can move from a locked server to public extortion platforms. Staying ahead requires more than changing a password once; it demands ongoing visibility into how your information travels across the internet. DoxxScan by GalaxyWarden delivers that visibility through continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts vulnerable to credential-based takeovers. Start your DoxxScan trial today to close the gaps this claimed breach and future ones can exploit.