The ransomware group cry0 listed Young Injury Law, a United States personal injury firm, on its data-leak site on 19 September, with the post description reading only "Coming soon…" — the group's typical placeholder for a claim it has not yet published material against. The listing is an extortion allegation, not evidence of a breach: no sample records, file listing or size claim accompanied it, there is no victim statement and no regulator notification, and the firm's own position is not reflected on the page. Cry0 has three posts in total, one in the last 30 days, and a reported average uptime of 8 per cent over that period — an operation with negligible infrastructure persistence, which makes a data release on any claimed victim unlikely. The entry is included for completeness of the leak-watch record rather than as a reportable incident: legal practices remain attractive targets because of the concentration of client-confidential and privileged material they hold, and the claim is worth tracking only for a follow-up publication or a firm statement. Nothing on the record today supports writing this as a breach.

• Source article