fbrlaw.com Listed by lockbit3 Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

Ransomware groups continue to target professional-services firms that hold sensitive client and financial records, listing victims on leak sites to pressure payment and amplify disruption. In this environment, even mid-sized law practices appear on public claim boards with little advance warning to those whose data may be involved.

On 18 July 2024 the ransomware group lockbit3 listed fbrlaw.com, the online presence of Fusco, Brandenstein & Rada, P.C., asserting that internal files had been exfiltrated. Public detail remains limited: the number of people affected is unknown, and independent confirmation of the claim has not been published. The listing matters because the firm handles workers’ compensation and Social Security disability matters, categories that routinely involve personal, medical and financial information.

Inside the incident

According to the lockbit3 leak-site entry dated 18 July 2024, the group claimed to have conducted a ransomware attack against fbrlaw.com and to have exfiltrated internal files. The posted summary stated that “ALL QuickBook databases” would be released after 48 hours and identified the victim as Fusco, Brandenstein & Rada, P.C., describing the firm as experienced workers’ compensation and Social Security disability attorneys. No further technical details—such as the initial access vector, encryption status of systems, or exact volume of data—have been disclosed in the available record. The number of individuals potentially affected is listed as unknown. The group’s statement is treated here as an unverified claim rather than established fact.

Who is lockbit3?

Lockbit3 is a well-documented ransomware-as-a-service operation that has been active for several years. The group typically gains access to networks, exfiltrates data, encrypts systems, and then posts victims on a dedicated leak site if a ransom is not paid. Its affiliates have previously targeted organizations across legal, healthcare, manufacturing and public-sector verticals, often advertising stolen files to increase pressure. Public reporting has associated Lockbit with double-extortion tactics—combining encryption with the threat of data publication—and with a franchise model that allows multiple operators to use the same tooling. Claims made on its leak site are assertions by the group itself; they are not independently verified unless separate confirmation appears.

Who is fbrlaw.com?

fbrlaw.com is the website of Fusco, Brandenstein & Rada, P.C., a law firm that publicly describes itself as specializing in workers’ compensation and Social Security disability representation. Firms of this type routinely collect and store client intake forms, medical records, employment histories, Social Security numbers, financial documents and correspondence with insurers and government agencies. Because the practice centers on individuals whose ability to work has been affected by injury or disability, the data it holds is both personal and consequential. A breach claim against such an organization raises concerns about the confidentiality of client matters and the integrity of the firm’s internal financial systems, including accounting databases.

What data was at risk

The lockbit3 listing asserts that internal files were exfiltrated and specifically references “ALL QuickBook databases.” QuickBooks is commonly used for accounting, payroll and client-billing records; if the claim is accurate, those databases could contain financial transactions, vendor details and possibly client-related payment information. Beyond that single reference, the exact contents of any other internal files remain undisclosed. Organizations of this kind typically hold personally identifiable information, medical documentation related to disability claims, case files and correspondence. Because the public record does not enumerate the full set of exposed data types or confirm their contents, the precise scope of any compromise is unconfirmed.

The real-world impact

For clients and other individuals whose information may have been held by the firm, the primary risks include potential misuse of personal identifiers, medical details or financial data for fraud, identity theft or targeted social-engineering attempts. Even when exact data types are unconfirmed, the combination of legal-case material and accounting records can enable convincing phishing or account-takeover efforts. For the firm itself, a ransomware claim can disrupt operations, impose recovery costs, trigger regulatory notification obligations and damage client trust. Because the number of people affected is unknown and independent verification is absent, the full scale of impact cannot yet be measured; affected parties must therefore treat the possibility of exposure seriously while awaiting further official statements.

Were you affected?

If you have been a client of Fusco, Brandenstein & Rada, P.C., or have otherwise shared personal or financial information with the firm, consider practical first steps: monitor financial accounts and credit reports for unusual activity, enable multi-factor authentication on important online services, and be cautious of unexpected communications that reference your legal or disability matters. You may also run a free exposure scan of your email address to check whether your information has already appeared in known breach data sets. Official notifications from the firm or regulators, if issued, should be followed carefully; until more detail is published, treat any claim of compromise as a reason for heightened vigilance rather than confirmed loss.

AICompiled with AI assistance from public sources and published under our editorial standards.