Hersher Law Listed by incransom Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On March 3, 2026, the ransomware group incransom listed the Law Offices of Eric Hershler, APC, on its data-leak site and claimed to have obtained internal files from the Los Angeles firm. The number of people whose information may be involved has not been disclosed, and no independent confirmation of the volume or content of any exfiltrated material has been made public. Incidents of this kind continue to affect organizations that hold records on individuals, even when the precise scale remains unclear.

What happened

The listing appeared on March 3, 2026. Public records indicate only that internal files were said to have been taken during a ransomware intrusion. No statement from the firm, no estimate of records involved, and no description of the intrusion method have been released. The group’s post constitutes a claim rather than verified evidence of the data’s authenticity or extent.

Inside incransom

Incransom is a ransomware operator that has conducted multiple campaigns against organizations in various sectors. Its documented pattern involves encrypting systems, copying selected files, and then posting victim names on a leak site when payment demands are not met. The group typically asserts possession of stolen material without providing independent proof at the time of listing. Public reporting on prior activity shows consistent use of this approach across different targets.

About Hersher Law

The Law Offices of Eric Hershler, APC, operates in Los Angeles and handles personal-injury litigation exclusively. Law firms of this type routinely maintain client intake forms, correspondence with medical providers, settlement documents, and internal administrative records. Because these organizations serve individuals during periods of physical or financial stress, the records they keep often contain detailed personal and health-related information.

The information in question

The only detail released is that internal files were claimed to have been exfiltrated. No inventory of file types, client counts, or specific data categories has been published. Organizations in this sector commonly store names, contact details, medical histories, insurance information, and case-related financial records. The exact contents of any material associated with this listing remain unconfirmed.

The real-world impact

Individuals whose records appear in legal files may face heightened risk of privacy loss or misuse of personal details if the material circulates. For the firm, the incident adds operational disruption and potential regulatory scrutiny common to any organization that handles sensitive client information. At present, the absence of confirmed data volumes limits precise assessment of downstream effects on clients or the practice.

What to do if you're exposed

Anyone who has been a client of the firm or who suspects their information may be involved should review account statements and credit reports for unusual activity. Enabling multi-factor authentication on email and financial accounts provides an immediate layer of protection. Readers may also run a free exposure scan of their email address against known breach data sets to determine whether their information has appeared in previously published collections.

AICompiled with AI assistance from public sources and published under our editorial standards.