ebarc.adv.br Listed by lockbit2 Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On September 22, 2021, the domain ebarc.adv.br appeared on a leak site associated with the LockBit2 ransomware group. Public records show only that the group listed the organisation and asserted possession of internal files obtained during a ransomware operation. No independent confirmation of the data volume, encryption status, or subsequent distribution has been published, and the number of individuals affected remains unknown. The incident is therefore known solely through the group’s listing. Details such as the initial access method, the duration of any unauthorised presence, or whether a ransom demand was issued or met are not available in public reporting.

What happened

The only documented event is the appearance of ebarc.adv.br on the LockBit2 leak site on 22 September 2021. The group stated that internal files had been removed. No further technical indicators, file samples, or statements from the organisation have been released to the public, leaving the scope of the activity unverified.

The group behind it: lockbit2

LockBit2 is a ransomware operation that emerged in 2020 and gained attention for publishing victim names on a dedicated site when ransom negotiations failed. The group’s public activity typically involves encrypting systems and threatening to release stolen material. Its listings constitute claims made by the actors themselves; independent verification of data authenticity or the circumstances of acquisition is not provided by the group.

About ebarc.adv.br

ebarc.adv.br operates in the Brazilian legal sector, where the .adv.br domain suffix is reserved for licensed advocates and law firms. Organisations of this type routinely process client identities, case files, financial arrangements, and correspondence with courts and counterparties. A listing on a ransomware site therefore raises the possibility that material ordinarily protected by professional confidentiality standards may have been copied.

The information in question

The listing refers only to “internal files.” No inventory of document types, client names, or record categories has been published. While legal practices commonly retain personal identifiers, contractual details, and privileged communications, the precise contents removed in this case have not been disclosed or independently examined.

The real-world impact

Individuals whose information appears in legal files may face risks of identity misuse or unwanted disclosure of sensitive proceedings. For the organisation, the incident creates uncertainty around data integrity and client trust. Because the scale of exposure and any subsequent use of the material remain unknown, the concrete consequences for specific people cannot yet be quantified from public sources.

What to do if you're exposed

Anyone who has been a client of ebarc.adv.br or who suspects their information may be involved should monitor bank and government accounts for unusual activity and consider placing fraud alerts with credit bureaus. Changing passwords for any associated online services and enabling multi-factor authentication are standard first measures. Readers may also run a free exposure scan of their email address against known breach data sets to determine whether their information has appeared in previously published collections.

AICompiled with AI assistance from public sources and published under our editorial standards.