Estudio O'Farrell Listed by crypto24 Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

Ransomware operations continue to target professional services firms that hold sensitive client records and internal communications. On March 24, 2026, the crypto24 ransomware group listed Estudio O'Farrell on its leak site, stating that internal files had been taken during a ransomware incident. The number of individuals affected remains undisclosed, and no independent confirmation of the data volume or contents has been made public.

What happened

The incident involves a listing posted by the crypto24 group on March 24, 2026. The group claims that internal files were exfiltrated from Estudio O'Farrell during a ransomware attack. No further details on the timing of the intrusion, the method of initial access, or the scale of the data taken have been released by the firm or by investigators. The number of people whose information may be involved is not publicly known.

Who is crypto24?

Crypto24 is a ransomware operation that follows the double-extortion model common among current threat groups. It typically encrypts systems and then threatens to publish stolen data unless a ransom is paid. The group maintains a leak site where it lists claimed victims and posts samples of material it says was obtained. Such listings are presented by the actors themselves and are not automatically verified by third parties.

Estudio O'Farrell and its sector

Estudio O'Farrell is a law firm based in Buenos Aires, Argentina, with a history spanning more than 130 years. It provides services in corporate law, tax law, banking and finance, labor law, and related areas, and has represented high-profile clients. Law firms routinely store client correspondence, contracts, financial records, and regulatory filings. A breach at such an organisation can expose information belonging to multiple parties beyond the firm itself.

The information in question

The only detail released is that internal files were allegedly exfiltrated. The precise categories of data, file counts, or time periods covered have not been disclosed. Organisations of this type commonly hold client identities, contractual terms, financial details, and privileged communications, yet the exact contents in this case remain unconfirmed.

What's at stake

Exposed internal files from a law firm can contain information that affects clients, counterparties, and employees. Such material may be used for further targeting, fraud, or reputational harm. For the organisation, the incident adds operational disruption and potential regulatory scrutiny common to any reported data incident in the legal sector.

If your data was in this claimed breach

Individuals who believe their information may have been held by Estudio O'Farrell should monitor accounts for unusual activity and consider placing fraud alerts with credit agencies where available. Changing passwords for any related services and enabling multi-factor authentication are standard first steps. Readers can run a free exposure scan of their email address to check whether their information has appeared in known breach data.

• Review bank and credit statements for anomalies
• Enable alerts on financial accounts
• Use unique passwords and multi-factor authentication on important services

AICompiled with AI assistance from public sources and published under our editorial standards.