Skip to content
Leak-site post naming cambrialawfirm.com, captured by ThreatCluster

cambrialawfirm.com

incransom

Ransomware leak-site victim intelligence · EN

Views
4,461
Posted
Aug 13, 2026
Publication
Aug 13, 2026
Country
CA
Industry
Professional Services

Summary

Written by ThreatClusterfrom site fields, file listing, victim profile, leak post, screenshot

Incransom claims customer data was stolen from cambrialawfirm.com, a victim with reported revenue of 15M$, per the leak page. The leak page notes the data was re-uploaded after the old download link was unavailable. The leak post is published and listed by the group.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Domains
cambrialawfirm.com

What was taken

personal and medical cards of all clients

Data categories
Customer's data
Leak site tags
ConfidentialContractsHRFinancial dataCustomer's dataIncidents

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

label
Re-uploaded; the old download link was unavailable.
value
present
Re-uploaded; the old download link was unavailable.
Re-uploaded; the old download link was unavailable.

Leak-site images (1)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture