Federis Abogados Listed by Booba Team Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On August 24, 2026, the ransomware group known as Booba Team listed Federis Abogados, a law practice associated with the website www.federisabogados.com, on its leak site. The listing claims that 61 GB of data was taken. Public detail beyond that claim is limited. As of writing, Federis Abogados has not publicly confirmed the claim.

A leak-site listing is an extortion tactic, not an independent verification. It does not by itself establish what systems were involved, whether the claimed volume is accurate, or whether any client or staff information is in third-party hands. For people who have dealt with a law firm, the practical question is what to watch for if the claim has substance—not to treat the claim as settled fact.

Inside the listing

According to the Booba Team listing, Federis Abogados appears as a named target, with the firm’s website given as www.federisabogados.com and a claimed data volume of 61 GB. The listing does not, in the material available for this report, name specific file categories, name counts of affected individuals, describe how access was supposedly obtained, or give an internal timeline of the alleged intrusion. The number of people who might be affected is unknown. Data types supposedly involved are not disclosed in the reported summary.

Ransomware crews often publish a victim name, a round data figure, and pressure language while withholding or exaggerating inventories. Nothing in the available facts confirms that 61 GB was copied, that it came from production systems, or that it matches the firm’s live records. The company has not publicly confirmed the claim as of writing. Timing beyond the August 24, 2026 report date, technical method, and independent corroboration are undisclosed.

Inside Booba Team

Booba Team is known publicly as a ransomware and data-extortion actor: groups in this category typically claim unauthorized access, threaten or carry out publication of stolen files on a dedicated leak site, and use that pressure to demand payment. Public reporting on such crews generally describes double-extortion patterns—encryption paired with theft claims, or theft claims alone—rather than a single fixed playbook for every victim.

Well-documented activity by extortion groups often includes naming organizations across professional services, posting sample files when they choose to, and setting countdown-style pressure on leak portals. Those patterns are background on how this class of actor operates. They are not proof of what happened inside Federis Abogados. For this incident, only what the group claims in its listing should be attributed to Booba Team: that the firm was listed and that the group asserts roughly 61 GB of data was taken. No further statements by the group about this specific victim are included in the facts provided here.

Federis Abogados and its sector

Federis Abogados is identified in the listing as a law practice. Law firms and similar legal practices routinely handle matters that depend on confidentiality: client identities, case strategies, contracts, correspondence, billing, and sometimes identity or financial documents supplied for representation. Even without any confirmed incident, the sector’s work product is inherently sensitive because it can affect litigation posture, personal privacy, and commercial negotiations.

A leak-site claim against a named firm matters because clients and counterparties cannot easily tell, from outside, whether an accusation is empty, recycled, or tied to real files. Professional rules and client expectations around legal confidentiality raise the stakes of any credible allegation, while still leaving the allegation unproven until the organization, a regulator, or other independent reporting confirms it. Public detail on Federis Abogados’ size, locations, or practice mix beyond the website reference in the listing is not part of the facts given for this article.

What data was at risk

The reported listing does not disclose data types. It is therefore not possible to state as fact which categories of information, if any, left the firm’s control. Exact contents remain unconfirmed.

If files were taken from a law practice, firms in this sector typically hold materials such as client contact details, matter files, emails and drafts, invoices and payment records, identity documents provided for know-your-client or court purposes, and internal administrative records. Those are sector norms, not an inventory of this claim. The 61 GB figure is the group’s claimed volume only; it does not specify databases, mailboxes, document stores, or backups, and it should not be read as a verified catalog.

What's at stake

If the claim were accurate and client-related files were among what the group asserts it holds, affected people could face targeted phishing that references real matters, attempts to impersonate the firm or opposing counsel, misuse of identity details, or exposure of private disputes. Opposing parties or competitors could, in theory, gain unfair insight into strategy or settlement positions if privileged or confidential work product were involved—again, only if such material was actually taken, which is not established here.

For the organization, an unverified listing still creates reputational and operational pressure: clients may ask for assurances, insurers and counsel may need to be engaged, and the firm may have to investigate whether systems were touched at all. A listing alone does not prove negligence, successful theft, or encryption. It establishes that a known extortion actor has chosen to name the firm and attach a data-volume claim. People affected, if any, are unknown; treating every past client as confirmed victims would overstate what the public record shows.

What to do now

Response should stay conditional. Until Federis Abogados or another authoritative source confirms an incident and describes scope, the useful steps are precautionary rather than panic-driven.

• If you are a client or contact of the firm, watch for unexpected emails, calls, or messages that urge urgent payment, document signing, or credential entry—especially if they cite case details you did not initiate.
• Prefer contact channels you already trust; verify any change of bank details or “new” secure links by calling a known number for the firm.
• If you shared identity or financial documents with the practice, monitor bank and credit activity and consider fraud alerts where that is available in your country.
• Use unique passwords and multi-factor authentication on email accounts tied to legal correspondence so a phish cannot easily pivot into other services.
• Do not assume your data is in the claimed 61 GB set; treat the Booba Team listing as an unverified claim and follow any official notice the firm may issue later.
• You can run a free exposure scan of your email to check whether your address has already appeared in other known breach datasets, which is a separate check from this unconfirmed listing.

Public detail on this matter remains limited to the group’s leak-site claim, the August 24, 2026 report date, the website reference, and the asserted 61 GB figure. Further clarity depends on confirmation or denial from the organization or on independent reporting that goes beyond the extortion page itself.

AICompiled with AI assistance from public sources and published under our editorial standards.