Skip to content
Leak-site post naming Lemon Law, captured by ThreatCluster

Lemon Law

incransom

Ransomware leak-site victim intelligence · EN

Data size
16.8 Gb
Files
42,000
Views
5,175
Posted
Sep 23, 2026
Country
USA
Industry
Professional Services

Summary

Written by ThreatClusterfrom site fields, file listing, victim profile, leak post, screenshot

The incransom group claims to have leaked 16.8 Gb of data across 42,000 files from Virginia A Lemon PLLC (Lemon Law). The leaked materials are described as including corporate documents, litigation materials, client personal data, financial documents and reporting, and personal files of employees. The leak page lists publication status as listed and provides a victim profile (legal name Virginia A Lemon PLLC, domain vlemonlaw.com, United States, headquarters in Lewisburg, West Virginia, revenue 8.9M$, named Maryann Kriger); ThreatCluster captured a screenshot of the leak post.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Domains
vlemonlaw.com
People named
Maryann Kriger

What was taken

Lemon Law PLLC; Leaked data: 16.8 Gb, 42k files including corporate documents, litigation materials, client personal data, financial documents and reporting, personal files of employees.

Data categories
corporate documentslitigation materialsclient personal datafinancial documents and reportingpersonal files of employees

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

Leaked data
16.8 Gb, 42к files corporate documents, litigation materials, client personal data, financial documents and reporting, personal files of employees, and much more.
leaked_data_description
Leaked data: 16.8 Gb, 42к files corporate documents, litigation materials, client personal data, financial documents and reporting, personal files of employees, and much more.

Leak-site images (1)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture