Lonich Patton Ehrlich Policastri Listed by qilin Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

Ransomware groups continue to publicize claimed thefts of corporate data through dedicated leak sites, a tactic that has become routine in the current threat environment. On December 10, 2025, the organization Lonich Patton Ehrlich Policastri appeared on the listing maintained by the Qilin ransomware group, which stated that internal files had been taken during a ransomware operation.

The number of individuals potentially affected remains unknown, and no further details on the volume or contents of the material have been released by either the group or the organization.

Breaking down the breach

The only confirmed public information is the listing itself. Qilin placed Lonich Patton Ehrlich Policastri on its leak site and asserted that internal files were exfiltrated. No date of the underlying intrusion, no count of affected records, and no description of the encryption or exfiltration methods have been disclosed. The organization has not issued a public statement confirming or disputing the claim.

Inside qilin

Qilin is a ransomware-as-a-service operation that has been active since at least 2022. The group typically gains initial access through compromised remote-access services or phishing, then moves laterally inside target networks before deploying encryption and copying selected files. Its standard approach involves both encrypting systems and threatening to publish stolen data unless a ransom is paid. The group maintains a public leak site where it lists organizations it claims to have targeted, a practice used to increase pressure during negotiations.

Who is Lonich Patton Ehrlich Policastri?

Lonich Patton Ehrlich Policastri is a law firm. Legal practices routinely store client communications, case files, financial records, and personal identifiers belonging to individuals and organizations involved in legal matters. A claimed compromise at such an entity is consequential because the material held by law firms is often subject to attorney-client privilege and can contain sensitive details that are difficult to replace or remediate once exposed.

The information in question

The listing refers only to “internal files.” No specific categories of data—such as client names, financial documents, or personal identifiers—have been published or confirmed. Organizations of this type commonly hold correspondence, contracts, discovery materials, and billing information, yet the precise contents of any exfiltrated material remain unconfirmed.

The real-world impact

Individuals whose information appears in legal files may face risks of identity misuse or unwanted disclosure of private matters if the material is later published. For the firm, the incident can complicate ongoing matters, increase insurance and remediation costs, and require notification or cooperation with clients and regulators depending on the jurisdiction and the nature of the data. At present, none of these outcomes can be quantified because the scope of the claimed theft is not public.

If your data was in this claimed breach

Monitor accounts for unusual activity and consider placing fraud alerts with credit agencies if financial or identity documents may be involved. Review any communications received directly from Lonich Patton Ehrlich Policastri for guidance on protective steps. Readers can also run a free exposure scan of their email address against known breach data to check whether their information has appeared in previously published listings.

AICompiled with AI assistance from public sources and published under our editorial standards.