Hersher Law Listed by INC Ransom Ransomware Group

On March 3, 2026, the Incransom ransomware group added the Law Offices of Eric Hershler to its public leak site, claiming that internal files from the Los Angeles personal-injury law firm had been exfiltrated.

What Public Reporting Shows

Public reporting indicates the firm, which specializes exclusively in personal injury cases, suffered a ransomware intrusion in which attackers copied sensitive internal documents before encryption. The incransom leak site published the listing on March 3, 2026, and made at least a portion of the stolen data available for download. Exact victim numbers remain undisclosed, and the specific types of records exposed have not been fully detailed in available reporting. The firm has not yet issued a public statement confirming the timeline or scope of the breach.

Why This Matters for You and Your Family

When a law firm that handles personal injury claims is breached, the files taken often contain names, addresses, phone numbers, Social Security numbers, medical records, insurance details, and financial information belonging to ordinary people like you. Personal injury case files frequently include entire families’ data because claims can involve spouses, children, or parents. Once that information leaves the firm’s control, it can appear on dark-web marketplaces within days. You and your family may not even know your data was involved until identity theft, insurance fraud, or harassing calls begin.

The Doxxing and Identity-Chain Risk

Ransomware leaks rarely stop at one company. A single exposed email or phone number can be linked to your usernames on social media, shopping sites, and gaming platforms. Attackers then build an identity chain that reveals where you live, where your children go to school, and which accounts share the same password. Credential leaks like this one cascade into account takeovers, especially for gaming accounts that often use the same email address parents rely on for family communication. Children’s gaming profiles are particularly attractive targets because they frequently contain chat logs, voice data, and linked parent accounts that hand attackers the full household picture.

Incransom’s Publicly Known Track Record

Public reporting attributes Incransom with emerging in late 2024. The group has listed dozens of organizations ranging from small manufacturers to professional service firms. Its typical playbook involves initial access through phishing or exploited remote desktop services, followed by claimed exfiltration of documents before deploying encryption. The group then demands payment for a decryptor and to prevent publication of the stolen files. When victims do not pay, Incransom posts samples and eventually the full dataset on its leak site, using the same .onion address that now lists the Hershler firm.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, usernames, and real-world identity so you can see exactly what this claimed breach may have exposed.
• Rotate any password you used at the law firm anywhere else it appears, then enable two-factor authentication through an authenticator app rather than text messages.
• Enable continuous DoxxScan monitoring across 13.1 billion+ breach records and more than 100 platforms so the next leak that touches your family is caught in hours instead of months.
• Cover the entire household with DoxxScan family protection that includes dependents and children’s gaming accounts, which often chain back to the same addresses and emails used in legal filings.
• Let remediation specialists handle takedown requests for any exposed personal records that surface on data-broker or underground sites.

The Hershler breach is a reminder that your personal injury claim, medical history, or family contact details can become public through no fault of your own. Taking concrete steps now limits how far attackers can travel down the identity chain. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1B+ breach records and 100+ platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that explicitly protects children’s gaming accounts. Start your DoxxScan trial today and close the gaps before the next leak appears.