Delegal Poindexter & Underkofler, P.A. Listed by morpheus Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

The law firm Delegal Poindexter & Underkofler, P.A. appeared on a listing published by the morpheus ransomware group on June 25, 2026. The entry states that internal files were exfiltrated during a ransomware attack, though the number of individuals affected and the precise scope of the data remain unknown. This incident forms part of a broader pattern in which ransomware operators target professional-service firms that hold records on behalf of clients. Public disclosure through a leak site listing draws attention to the exposure even when further details are not released by the victim organization.

What happened

The only confirmed public information is the June 25, 2026 listing by the morpheus group, which asserts that internal files were taken from Delegal Poindexter & Underkofler, P.A. No official statement from the firm, no confirmed count of records, and no description of the intrusion method or encryption status have been made available. The firm’s website, protectingcareers.com, continues to operate without published incident notices at the time of reporting.

Inside morpheus

Morpheus is a ransomware operation that has been publicly tracked for several years. Like other groups in this category, it typically gains access through common initial vectors such as compromised remote-access services or phishing, then moves laterally to locate and copy data before deploying encryption. The group maintains a leak site where it publishes names of organizations it claims to have targeted, using the listings as leverage in ransom negotiations. Attribution in any single case rests on the group’s own claims unless corroborated by the victim or independent forensic reporting.

Who is Delegal Poindexter & Underkofler, P.A.?

Delegal Poindexter & Underkofler, P.A. is a Florida law firm that provides specialized representation to employees in employment-law matters. Public records list its annual revenue at approximately five million dollars. Organizations of this type routinely collect and store client communications, employment records, medical documentation, settlement details, and other materials that carry statutory confidentiality obligations.

The information in question

The listing refers only to “internal files exfiltrated in ransomware attack.” No inventory of file types, client names, or record categories has been released. Law firms in this practice area commonly retain personal identifiers, wage and benefit histories, disciplinary records, and correspondence with opposing counsel or government agencies. Until the firm or a verified forensic report specifies the contents, the exact categories of exposed information cannot be confirmed.

The real-world impact

Individuals whose employment-related records were among the exfiltrated files face the possibility that personal or sensitive details could be used for targeted fraud, harassment, or further social-engineering attempts. The firm itself may encounter regulatory inquiries, civil claims from clients, or increased insurance costs. Because the volume and sensitivity of the data remain undisclosed, the scale of these downstream effects cannot yet be quantified.

Were you affected?

Anyone who was a client of Delegal Poindexter & Underkofler, P.A. or who provided personal information in connection with an employment matter should contact the firm directly for guidance on available notifications or protective measures. Individuals can also run a free exposure scan of their email address against known breach datasets to determine whether their information appears in other publicly reported incidents. Monitoring financial accounts and placing fraud alerts with credit bureaus remain standard precautionary steps when legal or employment records may have been exposed.

AICompiled with AI assistance from public sources and published under our editorial standards.