glawitsch-sutter Listed by sinobi Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On 27 October 2025 the Austrian law firm Glawitsch Sutter Rechtsanwälte GmbH appeared on the leak site of the ransomware group sinobi. The listing claims that internal files were taken during a ransomware attack. The number of people whose information may be involved remains unknown, and the precise contents of the files have not been publicly detailed. For clients, employees and counterparties of a law firm, any exposure of internal material carries concrete risks: confidential legal advice, personal identifiers and case-related documents can be misused for fraud, identity theft or further targeted attacks.

Public reporting so far consists only of the group’s claim and the firm’s own brief historical description. No independent confirmation of the volume of data, the method of intrusion or the identities of affected individuals has been released. That limited picture is still enough to warrant careful attention from anyone who has dealt with the firm.

Inside the incident

According to the available record, glawitsch-sutter was listed by the sinobi ransomware group on 27 October 2025. The group states that internal files were exfiltrated as part of a ransomware attack. No further technical details—such as the initial access vector, the encryption status of systems, the size of the data set or any ransom demand—have been disclosed in the public facts. The number of people affected is recorded as unknown. The incident is therefore known only through the group’s leak-site claim and the accompanying organisational note; independent verification of the scope or success of the attack has not been published.

Who is sinobi?

Sinobi is a ransomware operation that follows the now-common double-extortion model: data is stolen before systems are encrypted, and the threat of public release is used to pressure victims. Groups of this type typically maintain dedicated leak sites where they post victim names and sample files if negotiations fail. Sinobi has been observed listing organisations across multiple sectors and geographies; its public postings usually assert that internal documents, databases or other corporate material have been taken. In the present case the group claims that glawitsch-sutter’s internal files were exfiltrated. That assertion remains an unverified claim by the actors themselves; no additional statements or proof packages specific to this victim have been described in the available facts.

About glawitsch-sutter

Glawitsch Sutter Rechtsanwälte GmbH is a traditional Austrian law firm whose predecessor was founded in 1932 by Dr. Paul Fromherz. The practice was managed through three generations of the founding family and by Dr. Bernhard Glawitsch before Ernst Sutter joined in 2015, after which the firm adopted its present name while retaining its established quality standards. As a full-service legal practice it handles client matters that routinely involve sensitive personal data, commercial contracts, litigation files and privileged correspondence. A breach at such an organisation is consequential because legal work depends on confidentiality; any unauthorised access can undermine attorney-client privilege, expose parties to litigation risk and damage the firm’s ability to protect its clients’ interests.

What data was at risk

The facts state only that “internal files” were exfiltrated in a ransomware attack. No inventory of file types, no count of records and no confirmation of whether client dossiers, employee records or financial documents were included has been released. Organisations of this kind typically hold names, contact details, identity documents, case notes, contracts and correspondence. Because the exact contents remain unconfirmed, it is not possible to state which of those categories—if any—were actually taken. Readers should treat the exposure as potential rather than proven for any specific data element.

What's at stake

For individuals whose information may have been among the internal files, the practical risks include identity fraud, targeted phishing that references genuine legal matters, and the misuse of personal or financial details. For the firm itself, the stakes include regulatory notification duties, possible civil claims from clients whose confidentiality has been compromised, and the operational cost of containment and recovery. Because the scale of the incident is undisclosed, the full extent of these risks cannot yet be quantified; the mere possibility of exposure is already sufficient to justify precautionary measures by anyone who has shared data with the practice.

If your data was in this claimed breach

If you have been a client, employee or business contact of Glawitsch Sutter Rechtsanwälte GmbH, treat the listing as a prompt for basic hygiene rather than proof of personal compromise. Concrete first steps include:

• Monitor bank and credit accounts for unexpected activity and enable transaction alerts where available.
• Change passwords on any accounts that reused credentials shared with the firm, and enable multi-factor authentication.
• Be alert to phishing or social-engineering attempts that reference legal matters or the firm’s name.
• Request a free exposure scan of your email address to check whether it has already appeared in known breach data sets.

Public detail remains limited; further official statements from the firm or independent investigators would be required before the full picture can be known. Until then, measured vigilance is the most practical response.

AICompiled with AI assistance from public sources and published under our editorial standards.