Law Offices of Rakesh Mehrotra
bd_d0bac60e53481209 · schema v1 · pii pii-v1
Full breach record for Law Offices of Rakesh Mehrotra →Threat-actor claim — not a regulatory filing
This row is a claim by the ransomware group Triple X on its public extortion blog. It has not been validated by the victim or any regulator. Treat attribution and counts as the threat actor's assertion until a regulatory filing or victim disclosure corroborates them.
Source: Ransomware.live
Post text · scraped from the leak site
https://immigrationonline.com/ 1.5 terabytes of people's data in a immigrationonline law firm. Server overload and lack of updates have caused important data to be exposed to potential leaks. At the same time, many of these financial and tax documents also contain sensitive personal information, including full names, home addresses, Social Security numbers, banking details, and contact information. what will leak ? Confidential court cases : Details of lawsuits, complaints, or defenses that have not yet been filed in court. Financial and banking information : Sensitive client accounts, contracts, or transactions. Intellectual property documents : Such as patents, designs, or business contracts that have not yet been made public. Private correspondence and emails : Communications between the attorney and the client that should remain strictly confidential. what data will leak ? 24,900 passport files sample Tax forms of employees and colleagues sample ID cards and driver’s licenses sample few sample pics: pic 1 pic 2 pic 3 pic 4 pic 5 This is probably the right moment to point out that, at a certain stage, virtually any data breach is still a reversible situation. Companies are usually given an opportunity to contain the damage and resolve the issue albeit at a price. But despite knowing exactly what was happening, and fully understanding that it was putting the security and privacy of its own employees at risk, the company made a calculated decision to let it happen. And now the company will tell its employees: “Sorry, we’ve experienced a data breach, and your passports are now publicly available online.” But they will never say: “We were offered a chance to pay to prevent your passports from being published, but we decided it wasn’t worth it so now they’re on the internet. Sorry.” download data link : http://6qqz6m3b6htudohg2mlf5gdcalonxy3sh5g4dix4mpyirjcgelqqufad.oni
Source provenance
- Source URL
- https://www.ransomware.live/id/TGF3IE9mZmljZXMgVVMgaW1taWdyYXRpb25vbmxpbmUuY29tQFRyaXBsZSBY
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 12, 2026
- Raw hash
- c402f9d347c868e4a51536ed25c5a167a42bfeb59080d5d611c65dbaafe54fdf
Reporting entity
- Name
- Triple Xnorm: triple_x
Victim entity
- Name
- Law Offices of Rakesh Mehrotranorm: law offices of rakesh mehrotra
- Domain
- immigrationonline.com
- Industry
- Professional Servicesllm
What this source establishes
- Source ceiling
- A leak-site claim can't tell us: discovery date · materiality · notification · affected count · confirmed data types · compliance clock. These stay blank until a regulatory filing or victim disclosure lands.
- Attack vector
- Ransomware· triple_x
- Threat actor
- Triple XExternalFinancial
Compliance
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.