A ransomware group calling itself Qilin claims to have carried out a cyberattack on law firm Arnall Golden Gregory, with the claim dated August 16, 2026. This claim comes from an entry on the group’s own dark-web leak site, which is tracked by ransomware.live, a security research platform that monitors ransomware groups’ public leak sites. At this time, the claim has not been verified by Arnall Golden Gregory, by any independent security researcher, or by any regulator, and it should be treated as an unverified assertion made by a criminal extortion group rather than as established fact.
What we know — and don’t
- The Qilin group listed a claim dated August 16, 2026 referencing Arnall Golden Gregory on its leak site.
- Arnall Golden Gregory operates in the legal sector.
- The specific types of data the group claims to have obtained have not been disclosed or confirmed anywhere in the group’s listing.
- Arnall Golden Gregory has not issued a public statement confirming or denying the claim as of this writing.
- No regulatory filing or breach notification referencing this incident has been identified at this time.
What should you do if you have an account with this company?
- Change your password for any account associated with this firm, and avoid reusing that password anywhere else.
- Enable two-factor authentication (2FA) wherever it is offered, ideally using an authenticator app rather than SMS.
- Be alert to phishing emails, texts, or phone calls that reference this firm or claim to be following up on a data incident — attackers often exploit news of alleged breaches to trick people into handing over credentials.
- Avoid clicking links in unsolicited messages; instead, go directly to the organization’s official website if you need to check your account.
- Consider using a service like Aura or LifeLock to monitor your personal information and get alerted if it turns up somewhere it shouldn’t.
- Keep an eye on your financial and email accounts for unusual activity in the weeks following any claimed incident.
BreachLetter will update this page if Arnall Golden Gregory confirms this incident, if it is officially reported to regulators, or if further verified details emerge.