On May 9, 2026, the Genesis ransomware group added Ben F. Barcus and Associates PLLC, a law firm based in Tacoma, Washington, to its public leak site after the firm’s internal files were allegedly exfiltrated during a ransomware attack.
Already exposed?
You can’t unleak data. You can take away what it’s worth.
A leaked record is where it starts, not where it ends. What turns it into your front door is the look-up sites publishing your address beside your name — and those are what an AI reads when somebody asks about you. The free scan shows you both. We write to 582 companies.
See what is exposed about you — free scan →Not ready yet? Run a free breach check on this email
We’ll check it against 13.1B+ leaked records right now — no account needed. Continuous monitoring & alerts are part of Protection.
What's Publicly Reported from Reporting
Public reporting indicates the firm’s data appeared on the Genesis leak site hosted at an onion address. The posting states that attackers successfully exfiltrated internal files before encrypting systems or demanding payment. No exact victim count has been released, and the precise volume or sensitivity of the documents remains unclear from available reporting. The incident follows the group’s standard pattern of publishing samples or full datasets when organizations do not meet their demands.
Why This Matters for You and Your Family
When a law firm’s internal files are stolen, the information often includes names, addresses, phone numbers, Social Security numbers, financial records, and case details belonging to ordinary clients. If your family has ever worked with a small or mid-sized law practice, your personal data may now sit in a ransomware repository. Internal files exposed in such attacks frequently contain scanned documents, email correspondence, and spreadsheets that link multiple family members together. Once that information reaches criminal networks, it can be sold, traded, or used to target you directly for identity theft, loan fraud, or phishing campaigns that feel personal because the attackers already know details only your lawyer should have.
The Doxxing and Identity-Chain Implications
Ransomware leaks rarely stop at one company. Stolen spreadsheets and contact lists create starting points for doxxing chains that connect your email address, phone number, family members’ names, and online accounts. A single exposed client record can reveal your home address, children’s names, and even login details reused from other services. These linkages allow attackers to move from one platform to the next, turning a law-firm breach into account takeovers on email, banking, or social media. Gaming accounts belonging to you or your children are especially vulnerable because kids often reuse passwords or email addresses tied to family legal matters. Credential leaks like this one cascade quickly into doxxing chains that expose far more than the original files suggested.