Samuel I. White, PC Listed by anubis Ransomware Group: Ransomware Claim — What’s Alleged & What To Do
Samuel I. White, PC was listed by the Anubis ransomware group on April 21, 2026, after internal files were exfiltrated in a ransomware attack. The number of people affected has not been disclosed; anyone who may have had data with the firm should review their accounts and monitor for suspicious activity.
What happened
The incident involves a ransomware operation in which files were taken from the firm’s systems. Public reporting of the event is limited to the group’s claim of the listing and the statement that internal files were removed. No confirmation of the data’s contents, the method of initial access, or any ransom demand has been made public. The scale of the operation remains unknown.
Who is anubis?
Anubis is a ransomware group that has conducted operations against organizations in multiple sectors. Like other groups of this type, it typically encrypts systems and removes copies of data, then lists selected victims on a site to apply pressure. The group’s listing of Samuel I. White, PC constitutes its claim of responsibility; independent verification of the claim has not been reported.
Samuel I. White, PC and its sector
Samuel I. White, PC operates as a law firm. Organizations in this sector routinely maintain records that include client communications, case documents, and administrative information. A breach at such an entity can affect both the firm and the individuals or entities it represents, because legal files often contain material that is not otherwise public.
What data was at risk
The only detail released so far is that internal files were allegedly exfiltrated. No inventory of specific document types, client names, or data categories has been published. Law firms commonly store personal identifiers, financial details, and privileged communications, yet the exact contents removed in this case remain unconfirmed.
Why it matters
Legal records can contain information that is difficult to change once exposed, such as case strategy or personal identifiers tied to ongoing matters. For clients and former clients, the primary concern is the potential for misuse of that material. For the firm, the incident adds operational and reputational consequences that extend beyond the immediate recovery of systems.
What to do if you're exposed
Individuals who believe their information may be involved should monitor accounts for unusual activity and consider placing fraud alerts with credit agencies. A free exposure scan of an email address against known breach data sets can indicate whether the address has appeared in previously published records. Any specific questions about the incident should be directed to Samuel I. White, PC.
AICompiled with AI assistance from public sources and published under our editorial standards.
How this breach connects
More recent breaches
Schlam Stone & Dolan LLP Listed by anubis Ransomware GroupLaw Offices of Thomas J Skinner, IV Listed by anubis Ransomware GroupQuest Healthcare Solutions Listed by anubis Ransomware GroupBOSTON ORTHOTICS, INC. Listed by anubis Ransomware GroupLatest breaches
Read GalaxyWarden’s full analysis of the Samuel I. White, PC Listed by anubis Ransomware Group →
Publicly posted by anubis — unverified claim, pending independent verification
Breach listings — particularly those originating from ransomware or leak sites — are third-party claims that may be unverified, incomplete, or inaccurate. A listing does not by itself confirm that a breach occurred or that any specific data was exposed. Severity is an automated assessment, not a definitive rating. Verification status is shown where available.
Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. This information is aggregated from public sources for awareness only and is not legal, security, or investment advice.