Draneas Huglin Dooley LLC Listed by alphv Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

Ransomware groups continue to target professional services firms that hold concentrated stores of sensitive client information, using double-extortion tactics that combine encryption with data theft. Against that backdrop, Draneas Huglin Dooley LLC, a Portland-area law firm, was listed by the alphv ransomware group in late January 2024. Public detail remains limited, yet the listing itself signals that internal files may have been taken and that clients and the firm face the ordinary risks that follow such claims.

What is known is straightforward: the firm was named on the group’s leak site after an asserted ransomware attack that involved exfiltration of internal files. The number of people affected is unknown, and no further technical or financial details have been released. The episode matters because law firms routinely handle estate, tax, probate and business records that, if exposed, can enable identity misuse or secondary fraud long after the initial incident.

Inside the incident

According to available reporting dated 26 January 2024, Draneas Huglin Dooley LLC was listed by the alphv ransomware group. The group claims that internal files were exfiltrated during a ransomware attack. No public confirmation of the intrusion method, the precise date of compromise, the volume of data taken, or any ransom demand has been provided. The number of individuals potentially affected is listed as unknown. Beyond the leak-site claim and the description of internal-file exfiltration, further operational details remain undisclosed.

The group behind it: alphv

Alphv, also widely known in public reporting as BlackCat, is a ransomware-as-a-service operation that emerged in late 2021. It has been documented for using double-extortion techniques: encrypting systems while simultaneously stealing data and threatening to publish it on a dedicated leak site if payment is not made. The group has historically recruited affiliates who carry out the initial access and deployment, while the core operators manage negotiations and the leak infrastructure. Public records show alphv has claimed responsibility for attacks across multiple sectors, including professional services. In this case the group’s listing of Draneas Huglin Dooley LLC constitutes an unverified claim; no independent confirmation of the group’s assertions about this specific victim has been supplied in the available facts.

Draneas Huglin Dooley LLC and its sector

Draneas Huglin Dooley LLC is described as an experienced law firm serving clients in the greater Portland metropolitan area and throughout Oregon. Its practice focuses on estate planning, taxation, litigation, business formation, real estate, probate, trust administration, guardianship and conservatorship, elder law, Medicaid, and special-needs planning. The firm notes a strong tax background that supports both business owners and individuals. Law firms of this type routinely maintain client files containing personal identifiers, financial statements, wills, trusts, tax returns, medical and capacity-related documents, and corporate records. A breach involving such an organisation is consequential because the data are often long-lived, highly personal, and useful to criminals for identity theft, financial fraud, or social-engineering attacks against clients and their families.

What data was at risk

The facts state that internal files were exfiltrated in a ransomware attack. No more granular inventory of data types—such as specific client names, Social Security numbers, account numbers, or medical details—has been disclosed. Organisations of this kind typically hold precisely the categories of sensitive personal and financial information listed above. Because the exact contents remain unconfirmed, it is not possible to state with certainty which individual records were taken; only that internal firm files are claimed to have left the organisation’s control.

The real-world impact

For clients and other individuals whose information may have been among the internal files, the practical risks include potential identity theft, fraudulent tax filings, unauthorised access to financial or estate accounts, and targeted phishing that leverages knowledge of personal legal matters. These harms can surface months or years later. For the firm itself, the consequences may include regulatory notification obligations, reputational damage, possible civil claims, and the operational cost of investigation and remediation. Because the scale of the exposure is unknown, the full extent of impact cannot yet be quantified; the absence of confirmed numbers does not eliminate the need for vigilance by anyone who has done business with the firm.

Were you affected?

If you are a current or former client of Draneas Huglin Dooley LLC, or if you have reason to believe your information was held by the firm, take the following practical steps:

• Monitor bank, credit-card and tax accounts for unusual activity and consider placing a fraud alert or credit freeze with the major credit bureaus.
• Review any correspondence from the firm for official breach notifications and follow the guidance they provide.
• Be alert to phishing or social-engineering attempts that reference estate, tax or legal matters connected to the firm.
• Change passwords on any accounts that may have shared credentials or recovery information with the firm, and enable multi-factor authentication where available.
• Run a free exposure scan of your email address against known breach data sets to check whether your information has already surfaced elsewhere.

Public detail on this incident remains limited; further official statements from the firm or law-enforcement agencies, if any, should be treated as the authoritative source for updates.

AICompiled with AI assistance from public sources and published under our editorial standards.