Edward J Kone Listed by dragonforce Ransomware Group

On December 16, 2025, the DragonForce ransomware group added Edward J. Kone, P.A. to its leak site, claiming that internal files had been exfiltrated from the South Florida criminal defense and personal injury law firm.

What's Publicly Reported from Reporting

Public reporting indicates the firm’s data appeared on the DragonForce leak site hosted on an onion domain. The posting lists Edward J. Kone, P.A. as the victim and states that internal files were taken during a ransomware incident. No exact victim count or list of specific documents has been publicly detailed, but the presence on the leak site means the attackers are prepared to publish or sell the material if their demands are not met. The firm serves clients across Palm Beach, Miami-Dade, and Broward counties and handles sensitive cases involving criminal defense, traffic violations, and personal injury.

Why This Matters for You and Your Family

When a law firm’s internal files are stolen, the information often includes names, addresses, phone numbers, dates of birth, Social Security numbers, case notes, and financial details of everyday clients. If your family has ever used a lawyer for a traffic ticket, DUI, injury claim, or any criminal matter in South Florida, your records could be among those now in attackers’ hands. These details do not expire. Criminals can combine them with other leaks to open accounts in your name, file fraudulent tax returns, or harass you directly. Children’s information is especially vulnerable because it often sits alongside parent records and can be used years later when they turn 18.

The Doxxing and Identity-Chain Implications

Ransomware leaks rarely stop at one company. Once client data leaves the firm’s control, it can be cross-referenced with usernames, emails, and phone numbers found in earlier breaches. This creates long identity chains that link your real name to gaming handles, social-media accounts, and family members. Credential leaks like this one frequently cascade into account takeovers on Steam, Roblox, Fortnite, or other platforms where children use the same email or password. The result is doxxing that can expose home addresses, phone numbers, and relationships to anyone willing to pay for the package.

DragonForce’s Publicly Known Track Record

Public reporting attributes DragonForce with emerging in 2024 as a ransomware operation that combines double-extortion tactics with data leaks. The group has listed hospitals, manufacturers, professional service firms, and municipalities. Its typical playbook involves initial access through phishing or exploited remote desktop services, followed by exfiltration of sensitive files before encryption. If payment is not received, DragonForce publishes samples and offers the full archive for sale on its leak site, applying pressure through both data exposure and reputational harm.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, then use the cleanup to remove what you can.
• Rotate any password you ever used at Edward J. Kone, P.A. or similar firms and enable 2FA through an authenticator app everywhere that password was reused.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next leak exposing you is caught in hours rather than months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts that often chain back to the same addresses and emails.
• Let remediation specialists handle takedown requests across data brokers and leak sites so you do not have to negotiate with threat actors yourself.

The incident shows that professional services holding your private information remain prime targets. A single breach can quietly feed long-term identity theft and doxxing campaigns against you and your children. Start your DoxxScan trial today for continuous monitoring across 13.1B+ breach records and 100+ platforms, AI-powered identity-chain mapping that links handles to real identities, hands-on remediation by specialists, and full household coverage including children’s gaming accounts. Acting quickly limits how far attackers can travel down the chain that now includes the Edward J. Kone, P.A. files.