On February 21, 2025, the Florida estate-planning law firm FLA-Esq appeared on the RansomHub leak site with internal files listed after a ransomware attack. Clients whose estate plans, probate records, tax documents, or personal identifiers were stored with the firm now face the possibility that sensitive material has been stolen and may be published or sold.
Already exposed?
You can’t unleak data. You can take away what it’s worth.
A leaked record is where it starts, not where it ends. What turns it into your front door is the look-up sites publishing your address beside your name — and those are what an AI reads when somebody asks about you. The free scan shows you both. We write to 580 companies.
See what is exposed about you — free scan →Watch fla-esq.com
Get alerted the next time fla-esq.com files a breach with any US regulator — the filing, dated and sourced. A free single-company slice of Signals; no account needed.
We’ll email you only about fla-esq.com’s future breach filings and how to watch a whole vendor list — not general marketing. Unsubscribe any time.
Watching your whole vendor list (50 to 500 companies, by tier) is GalaxyWarden Signals.
What Public Reporting Shows
Public reporting indicates that RansomHub posted a sample of data from FLA-Esq and gave the firm a short deadline to negotiate before full release. The exposed material consists of internal files exfiltrated during the ransomware incident. The exact number of clients affected remains unknown, but the nature of a law firm’s records means names, addresses, Social Security numbers, financial details, family relationships, and legal instructions are likely included. No evidence has surfaced that the breach was limited to non-client files.
Why This Matters for You and Your Family
When a law firm that handles wills, trusts, and probate is breached, the information stolen is not abstract. It can include your home address, dates of birth for every family member listed in documents, bank account numbers, tax returns, and instructions about who inherits what. For many families this is the single place where all those details exist in one organized set. Once that bundle leaves the firm’s control, it becomes raw material for identity theft, targeted phishing, or pressure against relatives who believe their estate matters were private.
February 21, 2025 marks the public confirmation. The clock for you does not start when the firm notifies clients; it starts when the data appears on a leak site. Criminal groups move fast. You and your family are now in a race to lock down what can still be protected.