The threat actor incransom has stolen all criminal cases, clientsβ personal documents, medical records, and confidential files from aa-llp.com (aa.law), a US-based firm. This ransomware incident has significantly compromised sensitive information, impacting the United States.
Incident Details
- Victim: aa-llp.com (aa.law)
- Country: US
- Actor: incransom
- Source: http://incblog6qu4y4mm4zvw5nrmue6qbwtgjsxpw6b7ixzssu36tsajldoad.onion/blog/disclosures/69050d26e1a4e4b3ffc02904
- Discovered: 2025-10-31 19:51:55.593696
- Published: 2025-10-31 19:24:00.000000
Information
- Ransomware attack targeted aa-llp.com (aa.law).
- Perpetrator identified as incransom.
- All criminal cases, clientsβ personal documents, medical records, and confidential files were stolen.

Disclaimer: This post is based on public claims made by the ransomware group "incransom". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.