Paterson & Dowding Family Lawyers Listed by anubis Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On 23 October 2025, the Australian family-law firm Paterson & Dowding Family Lawyers was listed on the leak site operated by the anubis ransomware group. The group claims it carried out a ransomware attack that included the exfiltration of internal files. Public reporting describes the matter simply as a law-firm data breach; the number of people affected has not been disclosed, and further operational details remain limited.

Because family-law practices routinely handle highly personal information, any confirmed compromise of internal systems raises concrete privacy and security questions for clients and staff. At present the listing itself is the primary public claim; independent confirmation of the full scope has not been released.

What happened

According to the available record, Paterson & Dowding Family Lawyers appeared on anubis’s leak site on 23 October 2025. The group asserts that it executed a ransomware attack and removed internal files from the firm’s systems. No public statement from the firm detailing the timeline, the initial access vector, or the precise volume of data taken has been included in the facts. The number of individuals whose information may have been involved is listed as unknown. Beyond the headline claim of exfiltrated internal files, no further technical indicators, ransom demands, or recovery status have been disclosed in the public summary.

Ransomware incidents of this type typically involve encryption of systems combined with data theft, after which the operators threaten publication unless payment is made. In this case the only verified public element is the group’s listing of the firm and its assertion that internal files were taken. Everything else—exact dates of intrusion, systems affected, or whether any data has already been released—remains undisclosed.

Inside anubis

Anubis is a ransomware operation that has appeared in public threat reporting as a group employing double-extortion tactics: encrypting victim systems while simultaneously stealing data and threatening to publish it on a dedicated leak site. Like other contemporary ransomware crews, it commonly lists organisations it claims to have compromised, using those listings both as pressure and as advertising of its activity. Public analyses of anubis have noted its use of standard ransomware tooling, affiliate-style recruitment, and a focus on mid-sized professional-services targets, though the group’s precise internal structure and revenue figures are not fully transparent.

In the present matter the group’s leak-site entry constitutes a claim rather than independently verified fact. No additional statements attributed specifically to anubis about Paterson & Dowding—such as sample file dumps, ransom amounts, or negotiation timelines—appear in the supplied record. Readers should therefore treat the listing as an unverified assertion by the threat actor until further corroboration emerges.

Paterson & Dowding Family Lawyers and its sector

Paterson & Dowding Family Lawyers is a specialist family-law practice. Firms of this kind advise clients on separation, divorce, parenting arrangements, property settlements, and related financial and personal matters. In the ordinary course of business they collect and store extensive personal records: identity documents, financial statements, medical or psychological reports, correspondence, and detailed accounts of private family circumstances.

The family-law sector is attractive to ransomware operators precisely because of the sensitivity of that material. A breach can expose not only commercial data but also intimate details that, if misused, can cause lasting personal harm. Even when the precise contents of any stolen files remain unconfirmed, the mere possibility that such records left the firm’s control is consequential for clients, former clients, and staff whose information may have been held in the same systems.

What data was at risk

The facts state only that “internal files” were exfiltrated in the ransomware attack. No inventory of specific data types—client names, financial records, medical reports, or employee details—has been published. The number of people affected is recorded as unknown.

Organisations of this kind typically hold a wide range of sensitive material: full names and contact details, dates of birth, bank and tax information, property valuations, affidavits, court documents, and notes of confidential discussions. Whether any of those categories were among the files claimed by anubis cannot be confirmed from the public record. Until a fuller disclosure is made, the exact contents of the exfiltrated material remain unconfirmed.

Why it matters

For individuals whose information may have been involved, the primary risks are identity fraud, targeted social-engineering attempts, and the unwanted disclosure of private family matters. Even partial records can be combined with other breached data sets to enable impersonation or harassment. For the firm itself, a ransomware incident can disrupt casework, impose recovery costs, and require notification obligations under privacy law, all of which affect ongoing client service.

Because family-law files often contain information about children, financial vulnerability, or personal safety, the potential for secondary harm is higher than in many commercial breaches. The absence of confirmed numbers or file lists does not eliminate these risks; it simply means affected parties must proceed on the basis of incomplete information while remaining alert to unusual activity.

If your data was in this claimed breach

If you are a current or former client or employee of Paterson & Dowding Family Lawyers, treat the possibility of exposure seriously even while details remain limited. Begin by monitoring bank and credit accounts for unexpected activity, and consider placing fraud alerts with credit-reporting agencies. Change passwords on any accounts that may have shared credentials with firm systems, and enable multi-factor authentication wherever it is available. Be cautious of unsolicited emails or calls that reference family-law matters or request personal confirmation; these may be phishing attempts that exploit knowledge of the incident.

You can also run a free exposure scan of your email address to check whether it has already appeared in known breach data sets. Keep records of any suspicious contact and report confirmed fraud to the relevant authorities. As further official information becomes available, follow any guidance issued by the firm or by privacy regulators.

AICompiled with AI assistance from public sources and published under our editorial standards.