lindenlaw.com Listed by incransom Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

Howard T. Linden, P.C., operating as lindenlaw.com, a Michigan-based probate law firm, was listed by the ransomware group incransom on August 13, 2025. Public details indicate that internal files were exfiltrated in a ransomware attack, though the number of people affected remains unknown and further specifics about the incident have not been disclosed.

The listing itself represents a claim by the group rather than independently Reported Details. For clients and others connected to the firm, the episode raises questions about the security of sensitive legal records even when the full scope is still limited in public reporting.

Inside the incident

According to available records, lindenlaw.com was listed by the incransom ransomware group on August 13, 2025. The reported summary states that internal files were exfiltrated in a ransomware attack. No public information has been provided on the precise timing of the intrusion, the method of initial access, the volume of data taken, or any ransom demand. The number of people affected is listed as unknown. Beyond the group’s claim of exfiltration of internal files, no additional technical or operational details have been released in the available facts.

The group behind it: incransom

Incransom is a ransomware operation that follows the well-documented double-extortion model common among such groups. Actors typically gain access to a network, exfiltrate data, encrypt systems, and then threaten to publish the stolen material on a dedicated leak site if payment is not made. The group maintains a public listing page where it names victims and sometimes posts samples or full archives. Public reporting on prior activity shows incransom targeting organizations across multiple sectors, using standard ransomware tooling and pressure tactics rather than highly specialized custom malware unique to each case. In this instance the group claims to have listed lindenlaw.com after an attack involving exfiltration of internal files; that claim has not been independently verified in the provided facts, and no further statements attributed specifically to this victim appear in the record.

Who is lindenlaw.com?

Howard T. Linden, P.C., known online as lindenlaw.com, is a Michigan law firm that specializes exclusively in probate law. Its services include wills, trusts, guardianships, and wrongful-death settlements. The firm has nearly 50 years of experience and serves attorneys, insurance companies, creditors, and families, both local and out-of-state, who require assistance with Michigan probate matters. Attorney Howard Linden is described as providing thorough and timely support with a focus on efficient, cost-effective work. Law firms of this type routinely handle highly sensitive personal, financial, and legal documents belonging to clients and their families. A breach at such an organization therefore carries particular weight because the data involved often includes information that cannot easily be changed, such as estate plans, medical or financial details tied to probate proceedings, and identifying records of deceased individuals and their heirs.

What was likely exposed

The facts state that internal files were exfiltrated in the ransomware attack. Exact data types beyond that description, file counts, or specific categories of personal information have not been disclosed. Organizations of this kind typically hold client names and contact details, wills and trust documents, financial account information related to estates, court filings, correspondence with courts and other attorneys, and records concerning guardianships or wrongful-death claims. Because the precise contents remain unconfirmed, it is not possible to state with certainty which of these materials, if any, were among the internal files taken. Public detail on the exposed data is limited to the general claim of internal-file exfiltration.

Why it matters

For individuals whose information may have been held by the firm, the primary risks include identity theft, fraud involving estates or inheritance claims, and unwanted exposure of private family or financial matters. Probate records often contain Social Security numbers, bank details, property descriptions, and medical or personal histories that can be misused long after the original matter is closed. Even if the full set of files is never published, the mere fact of exfiltration creates ongoing uncertainty for clients and their relatives. For the firm itself, the incident can disrupt operations, require costly recovery and notification efforts, and damage the trust that is essential to legal practice. Because the number of people affected is unknown and the exact data remain undisclosed, the concrete impact cannot yet be quantified, but the nature of probate work means any exposure carries lasting personal consequences for those involved.

What to do if you're exposed

Anyone who has been a client of Howard T. Linden, P.C., or who believes their information may have been held by the firm, should monitor financial accounts and credit reports for unusual activity and consider placing a fraud alert or credit freeze with the major credit bureaus. Review any probate-related documents or correspondence for signs of misuse and notify the firm or relevant authorities if suspicious contact occurs. Keep records of any communications about the incident. Readers can also run a free exposure scan of their email address to check whether their information has already surfaced in known breach data sets. These steps provide a practical starting point while public details about the scope of this particular incident remain limited.

AICompiled with AI assistance from public sources and published under our editorial standards.