The PNST Listed by sarcoma Ransomware Group

On March 26, 2025, the sarcoma Ransomware Group listed Brazilian law firm Pacheco Neto Sanden Teisseire Advogados on its leak site and began publishing what it claims are the firm’s internal files exfiltrated during a ransomware attack.

Reported Details of the Incident

Public reporting indicates that sarcoma added PNST to its data-leak portal and started releasing samples of stolen material. The firm, which focuses on cross-border work for foreign investors and maintains offices serving clients in Germany, France and Scandinavia, has not yet confirmed the breach’s scope or the exact number of records involved. Available reporting describes the exposed material as internal files; no specific count of affected individuals has been released. The ransomware group’s typical pattern is to post proof of compromise and then demand payment to prevent full disclosure.

Why This Matters for You and Your Family

When a law firm’s internal documents are stolen, the information inside often includes names, addresses, phone numbers, email accounts, passport copies, financial records and correspondence tied to clients and their families. If your family has ever worked with PNST or any similar firm handling immigration, investment, estate or cross-border matters, your personal data may now sit in an attacker’s archive. Once leaked, that data does not expire. It can be sold, traded or used months or years later to open accounts, file fraudulent tax returns or impersonate you.

The Doxxing and Identity-Chain Risk

Ransomware leaks rarely stop at one company. A single exposed email or phone number can link your professional life to personal accounts, social-media handles and even your children’s gaming profiles. Attackers follow these chains to build complete identity dossiers. Credential leaks like this one frequently cascade into account takeovers across unrelated services. Gaming accounts belonging to teenagers are especially vulnerable because kids often reuse passwords or email addresses that appear in family legal files. The result is doxxing that can expose home addresses, family relationships and daily routines.

What to Do

• Run a DoxxScan to map every link between your emails, phone numbers, handles and real-world identity, then use the cleanup to remove what you can.
• Rotate any password you ever used at PNST or any related service, then enable two-factor authentication through an authenticator app on every account where that password was reused.
• Enable continuous DoxxScan monitoring across 13.1 billion+ breach records and more than 100 platforms so the next time your information surfaces you learn within hours rather than months.
• Cover the entire household with DoxxScan family protection that extends to dependents and children’s gaming accounts that often chain back to the same addresses and emails.
• Let remediation specialists handle takedown requests across data brokers and leak sites while you focus on securing your own logins.

The sarcoma listing of PNST is a reminder that legal and professional service providers remain high-value targets whose compromises directly affect ordinary families. Taking concrete steps now limits how far attackers can travel down the identity chain that begins with this claimed breach. DoxxScan by GalaxyWarden delivers that protection through continuous monitoring across 13.1B+ breach records and 100+ platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and household coverage that includes children’s gaming accounts.