Aurora Claims to Have Stolen Sensitive Data from Ishbia & Gagleard, P.C.

Summary
The ransomware group Aurora claims to have obtained sensitive law-firm files, including client litigation documents, SSNs, health records, tax returns and email archives. The monitoring post says the claim is unverified.
Key points
- The monitoring post attributes the claim to the ransomware group Aurora and says the information has not been independently confirmed.
- The group claims to have obtained more than 360 client and matter folders containing litigation and legal correspondence.
- The post lists Social Security numbers, protected health information, employee files, tax returns and 11 email archives among the allegedly exposed data.
- The claim also refers to personal legal matters involving Mat Ishbia, CEO of UWM Holdings Corp.
- The post identifies Ishbia & Gagleard, P.C. as the victim and gives discovery and publication dates of August 31, 2026.
Article Details
- Victim
- Ishbia & Gagleard, P.C.
- Victim Domain
- Unknown
- Attack Date
- 2026-08-31
- Claim Date
- 2026-08-31
- Encryption Status
- Unknown
- Encrypted Size
- Not disclosed
- Exfiltration Status
- Claimed; not independently confirmed
- Exfiltrated Data
- The aurora claim reportedly includes client and matter folders, personal and health information, tax returns, email archives, and legal matters related to Mat Ishbia. The source says it cannot confirm the claim's accuracy.
- Exfiltrated Size
- Not disclosed
- Ransom Demand
- Not disclosed
- Leak Status
- The claim is publicly listed; the source does not confirm the authenticity or publication of the data.
