fbrlaw.com Listed by lockbit3 Ransomware Group

Fusco, Brandenstein & Rada, P.C. was listed on the LockBit 3.0 leak site on July 18, 2024. The New York-based workers’ compensation and Social Security Disability law firm is the latest victim claimed in a ransomware attack that exfiltrated internal files, including QuickBooks databases. Anyone who has worked with the firm, received legal representation, or had their personal injury or disability records handled by them may have their information now at risk.

Reported Details from the Listing

The LockBit 3.0 leak site states that internal files were exfiltrated during a ransomware intrusion at fbrlaw.com. The posting specifically highlights that the first data tranche consists of all QuickBooks databases and will be published after 48 hours if no agreement is reached. The listing does not quantify how many individuals are affected, nor does it enumerate every type of record taken. It identifies the victim as Fusco, Brandenstein & Rada, P.C., a firm focused on workers’ compensation and Social Security Disability claims. The disclosure indicates the data was obtained through a ransomware attack but provides no further technical details on the initial access vector.

Why This Matters for You and Your Family

If you or a family member has ever filed a workers’ compensation claim, applied for Social Security Disability benefits, or worked with this firm, your sensitive personal information is likely among the stolen material. These records routinely contain full names, addresses, dates of birth, Social Security numbers, medical histories, employment details, and financial information tied to benefit claims. Exposure of such data can lead to identity theft, fraudulent tax filings, or targeted scams that exploit your specific medical or financial situation. Because the firm serves individuals who are already dealing with injury, job loss, or disability, the breach strikes at some of the most vulnerable households.

Doxxing and Identity-Chain Risks

Ransomware groups like LockBit routinely publish or sell stolen data, allowing other criminals to combine it with information from previous breaches. A single leaked email or phone number from this incident can be linked to your gaming accounts, social-media handles, or family-member profiles, creating a complete identity chain. Credential leaks of this nature frequently cascade into account takeovers, especially for gaming platforms used by children or teenagers who reuse passwords. Once an attacker controls one account, they can harvest additional personal details, locations, and relationships that make doxxing far easier and more damaging.

LockBit 3.0 Track Record

Public reporting attributes LockBit 3.0 as the current iteration of one of the longest-running ransomware-as-a-service operations. The group first emerged in 2019 and rebranded through successive versions after law-enforcement actions against earlier infrastructure. It has claimed thousands of victims across sectors, including healthcare providers, law firms, manufacturers, and local governments. The typical playbook begins with initial access gained through compromised credentials or exploited remote-desktop services, followed by rapid exfiltration of sensitive files before encryption. LockBit then demands ransom and, if unpaid, publishes samples or the full dataset on its leak site while offering the data for sale to other criminals. The group’s aggressive double-extortion style—threatening both encryption and public exposure—has made it one of the most active ransomware operations still operating in 2024.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, handles, and real identity so you can see exactly what this claimed breach connects to.
• Rotate any password you used at fbrlaw.com or related attorney portals and enable 2FA through an authenticator app everywhere that same password appears.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure of your information is caught within hours rather than months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts, which often become the next link in doxxing chains after credential leaks like this one.
• Let DoxxScan remediation specialists manage takedown requests for any exposed personal records appearing on data-broker or extortion sites.

The incident underscores that even specialized law firms holding sensitive disability and injury records remain prime targets. A forward-looking approach means treating every new breach as another thread in your permanent digital footprint and addressing those threads before criminals tie them together. DoxxScan’s continuous monitoring, AI-powered identity-chain mapping, hands-on remediation by specialists, and household coverage provide a practical way for you and your family to stay ahead of the next leak.