lawofficesoferichershler.com Listed by incransom Ransomware Group

On March 3, 2026, the IncRansom ransomware group listed the Law Offices of Eric Hershler on its leak site, claiming that internal files had been exfiltrated from the Los Angeles personal-injury law firm. Anyone whose personal-injury claim, medical records, or settlement details passed through the firm may now have sensitive information exposed.

What Public Reporting Shows

Public reporting indicates the firm’s website, lawofficesoferichershler.com, was added to the IncRansom disclosure page on that date. The data consists of internal files exfiltrated during a ransomware incident; the exact number of affected individuals remains unknown. The firm specializes exclusively in personal injury cases, so the stolen material is likely to contain names, addresses, dates of birth, Social Security numbers, medical histories, insurance details, and financial information tied to claims and settlements. No evidence has surfaced that the attackers have yet published any of the actual documents.

Why This Matters for You and Your Family

If you or a family member ever hired this firm for a car accident, slip-and-fall, or any other injury claim, your private information could be sitting on a criminal leak site. Medical records and settlement amounts are particularly valuable to identity thieves because they allow convincing fraud attempts against insurance companies or government benefits. Even if you were not the direct client, information about witnesses, family members listed on claims, or children named in guardianship documents can still be exposed. Once stolen, these details do not expire; they can surface months or years later in phishing campaigns, loan applications, or doxxing attempts aimed at your household.

The Doxxing and Identity-Chain Implications

Ransomware leaks rarely stop at one company. A single exposed email or phone number from the law firm’s files can be combined with data from earlier breaches to build a complete profile. Attackers link your work email to a personal account, then to a child’s gaming username, then to your home address. This identity chain turns a legal-matter breach into full doxxing that can lead to swatting, harassment, or targeted scams against every member of your household. Credential leaks like this one frequently cascade into account takeovers on email, banking, and gaming platforms.

IncRansom’s Publicly Known Track Record

Public reporting attributes IncRansom with emerging in late 2024. The group has targeted hospitals, schools, and small professional firms, typically gaining initial access through phishing or exploited remote-desktop services. After exfiltrating files, they encrypt systems and demand payment, then publish samples on their leak site if the victim does not pay by the stated deadline. Their playbook relies on steady pressure through partial leaks rather than immediate mass publication, aiming to force negotiation while keeping the data available for future extortion.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, then use the included cleanup of data-broker listings tied to the breach.
• Rotate any password you ever used at the law firm anywhere it has been reused, and switch on 2FA through an authenticator app rather than text messages.
• Enable continuous DoxxScan monitoring across 13.1 billion+ breach records and more than 100 platforms so the next exposure surfaces in hours instead of months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts, which often become the next link in doxxing chains after credential leaks like this one.
• Let remediation specialists handle ongoing takedown requests for any personal information that appears for sale or on public leak forums.

The incident shows that even a single professional services breach can place your family’s most sensitive personal and medical details into criminal hands. Acting quickly limits how far those details can travel. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and 100-plus platforms, AI-powered identity-chain mapping that connects online handles to real identities, and hands-on remediation by specialists who manage takedowns for you and your entire household, including children’s gaming accounts that frequently become targets once credential leaks occur.