The Roberts Family Law Firm Listed by sarcoma Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

Ransomware groups continue to single out professional-service firms that hold concentrated volumes of personal and financial records, using double-extortion tactics that combine system encryption with data theft. Against that backdrop, The Roberts Family Law Firm of Orlando appeared on a sarcoma ransomware leak site on 31 August 2024. The listing asserts that internal files were taken during a ransomware attack; the number of people affected remains unknown and public confirmation of the claim is still limited. For clients and staff of a family-law practice, any such exposure carries concrete privacy and security consequences that warrant careful attention.

What happened

Public reporting states that The Roberts Family Law Firm was listed by the sarcoma ransomware group on 31 August 2024. According to the group’s claim, internal files were exfiltrated as part of a ransomware attack. No further operational details—such as the precise date of intrusion, the initial access vector, the volume of data taken, or whether encryption was successfully deployed—have been disclosed. The number of individuals whose information may have been involved is listed as unknown. At present the listing itself constitutes an unverified assertion by the threat actor; independent confirmation of the breach’s scope or success has not been made public.

The group behind it: sarcoma

Sarcoma is a ransomware operation that follows the now-common double-extortion model: after gaining access to a network, operators copy data before encrypting systems and then threaten to publish the stolen material on a dedicated leak site if a ransom is not paid. The group typically posts victim names, sample files, and countdown timers to pressure organisations. Like other actors in this space, sarcoma has focused on mid-sized professional and service firms whose data are both sensitive and valuable for secondary fraud. Its listings are public claims rather than verified incident reports; organisations named on such sites sometimes later confirm an intrusion, while others dispute the assertion or remain silent. In this case the only available statement is sarcoma’s own listing of The Roberts Family Law Firm and the accompanying claim that internal files were taken.

The Roberts Family Law Firm and its sector

The Roberts Family Law Firm is an Orlando practice led by attorney David Roberts, who has practised since his time at the University of Florida’s Levin College of Law. The firm concentrates on family-law matters—divorce, mediation, negotiation and related proceedings—and markets itself on aggressive representation and client service. Family-law practices routinely collect and retain highly personal records: financial statements, tax returns, property inventories, medical or counselling notes, custody evaluations, correspondence, and identification documents belonging to clients and sometimes their children. Because these materials are central to legal strategy and court filings, they form a concentrated repository of sensitive data. A breach at any such firm therefore raises immediate questions about the confidentiality of ongoing and past cases, the security of opposing-party information that may have been shared in discovery, and the firm’s own internal administrative files.

What was likely exposed

The only data category named in public reporting is “internal files exfiltrated in ransomware attack.” No inventory of file types, client names, or record counts has been released. Organisations of this kind typically hold client intake forms, billing records, case-management notes, scanned identity documents, financial disclosures, and internal emails. Whether any of those categories were among the files claimed by sarcoma remains unconfirmed. Until the firm or independent investigators publish a verified list, the precise contents of the alleged exfiltration cannot be stated as fact.

What's at stake

For individuals whose information may have been taken, the practical risks include targeted phishing that references real case details, attempts at identity theft using personal identifiers, and the possibility that sensitive family matters—custody disputes, financial settlements, or allegations made in court—could appear in unauthorised hands. Even if the data are never published, the mere fact of exfiltration creates an ongoing exposure window. For the firm itself, the consequences can include regulatory notification duties, potential civil claims from clients, reputational damage, and the operational cost of forensic investigation and system restoration. Because family-law files often contain information about minors or highly personal circumstances, the privacy impact can be especially acute even when the absolute number of affected people is modest or still unknown.

Were you affected?

If you are a current or former client, opposing party, or employee of The Roberts Family Law Firm, treat the listing as a prompt for caution rather than confirmed proof of compromise. Monitor bank and credit accounts for unfamiliar activity, enable multi-factor authentication on email and financial services, and be alert for phishing messages that appear to reference your legal matter. Consider placing a fraud alert with the major credit bureaus. You can also run a free exposure scan of your email address to check whether that address has already appeared in known breach data sets; such a scan does not prove or disprove involvement in this specific incident, but it provides an additional data point for personal risk assessment. If the firm issues official notifications or guidance, follow those instructions promptly.

AICompiled with AI assistance from public sources and published under our editorial standards.