Rhysida Claims Data Theft From Latin American Publisher Legis
Summary
Rhysida claims it accessed and exfiltrated data from Legis, including databases, legal documents, financial records, and customer information. The claim is unverified; the post says it cannot confirm the information.
Key points
- The claim names Legis, a legal and business information publisher serving Colombia, Venezuela, Argentina, Mexico, Peru, and Chile.
- The post attributes the claim to ransomware group Rhysida and lists discovery and publication dates of September 23, 2026.
- Allegedly exposed material includes SQL databases, PST/OST files, legal documents, and litigation records.
- The claimed data also includes shareholder and beneficial-owner records, identity-document copies, financial and tax reporting, and customer contract information.
- The post says the claims are based on Rhysida's public statements and have not been independently confirmed.
Article Details
- Victim
- Legis
- Claim Date
- 2026-09-23
- Encryption Status
- Unknown; the source does not report whether data was encrypted.
- Exfiltration Status
- Alleged by rhysida; not independently confirmed.
- Exfiltrated Data
- The claim alleges access to or exfiltration of SQL databases, legal documents, shareholder and ID copies, customer contract records, and finance, ownership, and litigation records.
- Ransom Demand
- Not disclosed
- Leak Status
- A rhysida claim was published on its listing site; the source says the information could not be confirmed. No leak or publication of the alleged data is confirmed.
Threat Actors
Countries
ArgentinaThe threat actor “rhysida” is named in connection with these alleged compromises, with impacts to Colombia, Venezuela, Argentina, Mexico, Peru, and ChileChileThe threat actor “rhysida” is named in connection with these alleged compromises, with impacts to Colombia, Venezuela, Argentina, Mexico, Peru, and ChileColombiaThe threat actor “rhysida” is named in connection with these alleged compromises, with impacts to Colombia, Venezuela, Argentina, Mexico, Peru, and ChileMexicoThe threat actor “rhysida” is named in connection with these alleged compromises, with impacts to Colombia, Venezuela, Argentina, Mexico, Peru, and ChilePeruThe threat actor “rhysida” is named in connection with these alleged compromises, with impacts to Colombia, Venezuela, Argentina, Mexico, Peru, and ChileVenezuelaThe threat actor “rhysida” is named in connection with these alleged compromises, with impacts to Colombia, Venezuela, Argentina, Mexico, Peru, and Chile