Martin, Cukjati & Tom, LLP Listed by incransom Ransomware Group

On March 2, 2026, the law firm Martin, Cukjati & Tom, LLP appeared on the leak site of the incransom ransomware group. The firm, which specializes in high-stakes litigation, is claimed to have had internal files exfiltrated during a ransomware attack. While the exact number of people whose information was taken remains unknown, anyone who has worked with the firm, been represented by it, or had their documents handled by it could be affected.

Reported Details of the Breach

Public reporting indicates that incransom added the law firm to its disclosure page on March 2, 2026. The group claims to have stolen internal files during a ransomware incident. No specific volume of records or list of exposed data types has been published in available reporting. The firm’s own description notes it handles sensitive litigation matters for individuals and businesses, which suggests the stolen files could contain contracts, court filings, client communications, financial details, or personally identifiable information.

Why This Matters for You and Your Family

When a law firm loses control of client files, the impact reaches far beyond the business itself. If you or any member of your family ever shared personal details, medical records, financial statements, or legal correspondence with Martin, Cukjati & Tom, that information may now sit in attackers’ hands. Stolen legal files often contain full names, addresses, dates of birth, Social Security numbers, phone numbers, email accounts, and case-specific facts that can be used for identity theft, fraud, or targeted harassment. Your family’s private matters, once protected by attorney-client privilege, could be exposed or sold to the highest bidder.

The Doxxing and Identity-Chain Risk

Legal documents frequently link multiple pieces of information about the same person: home address, spouse’s name, children’s names, email addresses, phone numbers, and sometimes even login credentials for related online accounts. Attackers can chain these details together to build a complete profile. A single leaked email and password from one case file can lead to takeover of your work account, personal email, or social media. This chain often extends to gaming accounts, especially for families where children use family email addresses or shared phone numbers to register. Credential leaks like this one routinely cascade into account takeovers and doxxing campaigns that expose your home address, daily routines, and family relationships.

Incransom’s Known Track Record

Public reporting attributes the group’s emergence to 2024. It has targeted organizations across multiple sectors, with a focus on professional services firms that hold sensitive client data. The group’s typical playbook involves gaining initial access, exfiltrating documents before encryption, and then publishing samples on its leak site while demanding payment to prevent full release. Extortion pressure is applied through public naming and controlled disclosure of stolen files. Exact prior victim counts and success rates are not uniformly documented, but available reporting describes a pattern of hitting smaller to mid-sized firms that may lack enterprise-grade defenses.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, then use the cleanup to remove what you can.
• Rotate any password you ever used at the law firm anywhere it has been reused, and switch to 2FA through an authenticator app rather than text messages.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next leak that touches your family is caught in hours, not months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts that often chain back to the same addresses and credentials.
• Let remediation specialists handle takedown requests across data brokers and exposed profiles while you focus on securing your own accounts.

The breach of Martin, Cukjati & Tom, LLP shows how quickly professional services incidents become personal ones. Taking deliberate steps now can limit how far attackers can travel down the identity chain that begins with this leak. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1B+ breach records and 100+ platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts. Start your DoxxScan trial today to see exactly where your information stands and begin closing the gaps.