Ayres Carr & Sullivan, P.C. Listed by thegentlemen Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On July 1, 2026, the ransomware group thegentlemen listed Ayres Carr & Sullivan, P.C. on its leak site, stating that internal files had been taken from the Indianapolis law firm. Public records show no confirmed count of individuals affected and no further details on the volume or contents of the material. The incident fits a pattern seen across professional-services firms, where threat actors target organizations that hold client records and case files. The listing itself remains the primary public indicator of the event.

Inside the incident

The only confirmed information is the July 1, 2026 listing by thegentlemen and the statement that internal files were allegedly exfiltrated during a ransomware attack. No date of intrusion, method of entry, or confirmation of encryption has been released. The number of people whose information may be involved is listed as unknown.

Who is thegentlemen?

Thegentlemen is a ransomware operator that maintains a leak site to publish data it claims to have taken from victims. Such groups typically gain initial access through phishing, remote-desktop exposures, or supply-chain weaknesses, then move laterally to locate and copy files before deploying encryption. The listing of Ayres Carr & Sullivan, P.C. constitutes the group’s claim; no independent verification of the data’s authenticity or scope has been made public.

About Ayres Carr & Sullivan, P.C.

Ayres Carr & Sullivan, P.C. is a civil litigation and trial firm based in Indianapolis, Indiana, with roots dating to 1914. Its practice areas include personal injury, probate, bankruptcy, and corporate matters. Law firms of this type routinely store client communications, financial documents, medical records, and court filings—material that can remain sensitive for years after a matter concludes.

The information in question

The listing states only that internal files were exfiltrated. No inventory of specific document types or data fields has been released. Organizations in this sector commonly hold names, addresses, Social Security numbers, financial account details, medical information, and privileged attorney-client communications; whether any of these categories are present in the claimed exfiltration remains unconfirmed.

The real-world impact

Individuals whose records appear in the material could face risks of identity theft, financial fraud, or unwanted disclosure of private legal or medical matters. The firm may incur costs related to investigation, notification, and remediation. Because the exact data set is undisclosed, the scale of potential harm cannot be quantified from available information.

Were you affected?

Begin by monitoring bank and credit accounts for unusual activity and placing fraud alerts if warranted. Review any correspondence from the firm regarding the incident. Readers may also run a free exposure scan of their email address against known breach data sets to check for prior appearances of their information.

• Request a copy of any client notification the firm issues.
• Consider a credit freeze if financial identifiers are likely to have been stored.
• Retain records of any contact with the firm or credit agencies.

AICompiled with AI assistance from public sources and published under our editorial standards.