L. S. King and Associates Listed by Anubis Ransomware Group

On March 10, 2026, the ransomware group Anubis added L. S. King and Associates, a Georgia-based accounting firm operating at www.cpageorgia.com, to its public leak site. The listing states that internal files were exfiltrated during a ransomware attack. While the exact number of people affected remains unknown, the breach involves client financial records and other sensitive business documents from a firm that serves individuals and families across the state.

What Public Reporting Shows

Public reporting on the Anubis leak site, tracked by ransomware.live, shows the firm was listed on March 10, 2026. The dataset is described as relatively small yet contains exfiltrated internal files. No sample data has been publicly released in the initial listing, and the precise volume or specific categories of exposed records have not been independently verified. Available reporting describes the incident as a classic ransomware deployment that included both encryption of systems and exfiltration of documents before the threat actors demanded payment.

Why This Matters for You and Your Family

If you or your family have ever used an accounting firm, tax preparer, or financial advisor in Georgia, your personal information could be among the records now held by criminals. Tax returns, Social Security numbers, bank account details, and income statements are common in accounting firm files. Once exposed, this data can be sold quietly on underground forums or used to file fraudulent tax returns, open accounts in your name, or pressure you with threats of public release. Even a small dataset can contain hundreds of client records, directly affecting ordinary people who trusted the firm with their most private financial lives.

The Doxxing and Identity-Chain Implications

Stolen financial documents rarely stay isolated. A single leaked tax return can link your name, address, date of birth, and employer to email addresses, phone numbers, and online usernames found in other breaches. Threat actors then build an identity chain that lets them locate your social media profiles, your children’s gaming accounts, and family member details. Credential leaks like this one frequently cascade into account takeovers across email, banking, and gaming platforms. Public reporting indicates that such chains often lead to doxxing, where personal addresses, phone numbers, and photographs are published to increase pressure or enable identity theft. Children’s gaming accounts are especially vulnerable because parents often reuse passwords or security questions derived from the same personal data now circulating.