Ransomware victim disclosure
← All victimsPrescott & Holden
Claimed by genesis · listed 12 days ago
Status timeline
- Listed
May 9, 2026
- Data leaked
At a glance
About the victim
AI dossier — public-source company profilePrescott Holden Family Law is a family law firm based in Tustin, California (Orange County), serving the Southern California community for nearly three decades. The firm specializes in family law matters including divorce and custody cases, offering individualized representation with a small team of attorneys led by Valerie Prescott Holden. The practice emphasizes discretion, integrity, and client communication.
- Industry
- Family Law Legal Services
- Address
- 400 West First Street, Tustin, CA
Attack summary
Severity: critical — The group claims exfiltration of 400 GB of data from a law firm handling sensitive family law matters, including client PII, financial records, and email archives — constituting regulated and highly sensitive personal data (divorce, custody, financial disclosures) at meaningful scale, with a published file list confirming data publication.The Genesis ransomware group claims to have exfiltrated approximately 400 GB of data from Prescott Holden Family Law, including client PII, operational data, financial data, email archives, network user folders, and legal/legislative data, with a file list published on their onion site.
Data the group says was taken
AI dossier — extracted from the leak post- Client PII
- Operational data
- Legal/legislative data
- Financial data
- Company fileserver data
- Email archives
- Network user folders
The group's post references roughly 1 proof file.
What the group claims
A legal firm dedicated to safeguard the rights of its clients
The leak post
captured from the group's siteA legal firm dedicated to safeguard the rights of its clients. ``` - 400 Gb of accessible data. - PII and data of clients. - Operational Data. - Ligislatition data. - Financial Data. - Data from company fileserver. - Email archives. - Folders of network users. ``` [Download The List of Company Files](http://genesis6ixpb5mcy4kudybtw5op2wqlrkocfogbnenz3c647ibqixiad.onion/download/57e0056d90ab194a77e7.txt)
Sources
Source
Indexed 12 days agoThis page surfaces a public ransomware disclosure indexed by Darkfield. Original posts come from the operator's own leak site; we cross-check against ransomware.live, RansomLook and RansomWatch where applicable. Share this URL freely.
