mortensenlawoffices.com/USA/99GB Listed by kairos Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On July 28, 2025, the ransomware group known as kairos listed Mortensen Law Offices on its leak site, claiming to have exfiltrated 99GB of data from mortensenlawoffices.com in the United States. Public reporting identifies the incident as involving internal files taken during a ransomware attack, though the number of people affected remains unknown and further specifics have not been disclosed.

This listing places the law firm among victims claimed by the group. Because law offices routinely handle confidential client matters, any confirmed exposure of internal files carries potential consequences for individuals whose information may have been involved, even when exact details stay limited.

What happened

According to the available record, Mortensen Law Offices was listed by the kairos ransomware group on July 28, 2025. The listing references mortensenlawoffices.com and states that 99GB of material was involved. The reported summary describes the event as a ransomware attack in which internal files were allegedly exfiltrated. No confirmed figure for the number of people affected has been released, and public detail on the precise timing of the intrusion, the method of initial access, or any ransom demand remains undisclosed. The group's leak-site entry constitutes a claim rather than independently verified confirmation of the full scope.

Inside kairos

Kairos is a ransomware operation that has appeared in public reporting as employing double-extortion methods. In such campaigns the group typically encrypts systems while also copying data, then threatens to publish the stolen material on a dedicated leak site if payment is not made. Listings often include the victim's name, a claimed data volume, and sometimes sample files. Prior activity attributed to kairos has followed this pattern across multiple sectors, with the group using leak sites to pressure organizations. In the present case the listing of Mortensen Law Offices is presented by the group as fact; independent confirmation of the claimed 99GB volume or the precise contents has not been supplied in the public record.

Mortensen Law Offices and its sector

Mortensen Law Offices operates as a legal practice. Law firms of this type routinely manage sensitive client records, case files, correspondence, financial documents, and personal identifying information belonging to individuals and businesses. Such material is subject to professional confidentiality obligations and, in many jurisdictions, to data-protection rules. A ransomware incident that involves the exfiltration of internal files therefore raises particular concern because the data held by a law office is often more sensitive and longer-lived than the records of many other commercial entities. The potential for exposure of privileged communications or personal details makes any claimed breach consequential for both the firm and those it represents.

The information in question

The available facts state that internal files were exfiltrated in the ransomware attack. No further breakdown of file types, categories of personal data, or specific documents has been disclosed. Organizations in the legal sector typically retain client names and contact details, case-related documents, billing records, identification numbers, and correspondence that may contain private or privileged information. Because the exact contents of the claimed 99GB have not been confirmed publicly, it is not possible to state with certainty which of these categories, if any, were included. The record simply notes that internal files were taken; anything beyond that remains unconfirmed.

The real-world impact

For individuals whose data may have been among the internal files, the primary risks include unauthorized use of personal details for identity fraud, targeted phishing, or other social-engineering attempts that leverage knowledge of legal matters. Clients could face privacy harms if confidential case information surfaces. For the firm itself, the incident may bring operational disruption, potential regulatory scrutiny, and reputational effects that affect client trust. Because the number of people affected is unknown and the precise data types remain undisclosed, the scale of these risks cannot yet be quantified. The listing itself, however, already places the organization under public notice that sensitive material may have left its control.

What to do if you're exposed

Anyone who has been a client of Mortensen Law Offices or has reason to believe their information may have been held by the firm should begin by monitoring financial accounts and credit reports for unusual activity. Consider placing a fraud alert or credit freeze with the major credit bureaus and remaining alert to unsolicited communications that reference legal matters. Change passwords on any accounts that may have shared credentials with the firm, and enable multi-factor authentication where available. Readers can also run a free exposure scan of their email address to check whether that address has already appeared in known breach data sets. If further official notifications are issued by the firm or by authorities, follow the specific guidance provided in those notices.

AICompiled with AI assistance from public sources and published under our editorial standards.