mortensenlawoffices.com/USA/99GB Listed by kairos Ransomware Group

On July 28, 2025, the kairos Ransomware Group listed mortensenlawoffices.com on its leak site, claiming to have exfiltrated 99GB of internal files from the California-based law firm Mortensen Law Offices.

Reported Details of the Incident

Public reporting indicates the firm’s data appeared on the kairos leak site hosted on the dark web. The posting includes a sample of the allegedly stolen material and states that 99GB of internal documents were taken during a ransomware incident. The exact number of individuals whose information may have been exposed remains unknown. Available reporting describes the data as internal files, though specific categories such as client names, Social Security numbers, or financial records have not been independently verified in open sources.

Why This Matters for You and Your Family

When a law firm’s internal files are stolen, the people whose documents were stored there face direct risk. If your estate plan, divorce records, personal injury claim, or any other legal matter was handled by Mortensen Law Offices, your private information may now sit on a ransomware site. Client files from law offices frequently contain full names, addresses, dates of birth, Social Security numbers, bank details, and family information. Once that data leaves the firm’s control, it can be sold, traded, or used to open accounts in your name. Your family members listed in those files—including children—are also exposed.

The Doxxing and Identity-Chain Risk

Ransomware groups rarely stop at one leak. Stolen legal files often contain email addresses, phone numbers, and account handles that link together. Attackers can follow these connections to gaming accounts, social media profiles, and school records. A credential found in the 99GB dump can lead to takeover of your child’s Roblox or Fortnite account, which in turn reveals your home address through linked payment methods or chat logs. This is exactly how small breaches become long-term doxxing campaigns. Credential leaks cascade into account takeovers that expose far more than the original files suggested.

Kairos Ransomware Group Track Record

Public reporting attributes the kairos Ransomware Group with operations that emerged in late 2024. The group has targeted hospitals, manufacturers, and professional service firms. Its typical playbook involves gaining initial access through phishing or exploited remote desktop services, exfiltrating data before encryption, and then publishing samples on its leak site when victims refuse to pay. Extortion demands usually include both ransom for decryption and a separate fee to prevent publication. The group maintains an active dark-web portal where it posts victim names and data samples on a predictable schedule.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, handles, and real-world identity so you can see exactly what chains back to the Mortensen files.
• Rotate every password you ever used at mortensenlawoffices.com anywhere it has been reused, and switch on 2FA through an authenticator app instead of text messages.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next time your information surfaces you learn within hours rather than months.
• Cover the household with DoxxScan family protection that includes dependents and your children’s gaming accounts, which often become the weakest link in these identity chains.
• Let remediation specialists handle data-broker takedown requests and follow-up notifications on your behalf while you focus on securing accounts.

The Mortensen Law Offices breach is a reminder that your most sensitive personal documents are only as safe as the vendors you trust. Acting quickly on the credentials and connections exposed in this 99GB leak can stop the chain before identity thieves or doxxers turn it against you or your children. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping that links online handles to real identities, and hands-on remediation by specialists who manage takedowns for the entire household—including children’s gaming accounts.