INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Rhysida Publishes New Victim Law Offices of R David Williams

| 2026-09-30 10:10 CRITICAL LOW RANSOMWARE & EXTORTION
Executive Summary
AI-generated
A ransomware attack targeting the Law Offices of R. David Williams, P.A., a criminal defense firm with over 175 clients, occurred on September 30, 2026. The targeted sector was Defense and the temporal reference spanned from approximately 4 years ago to the present day, affecting at least two clients in ICE custody and one material witness under GPS monitoring for more than three years. The attack involved exfiltration of sensitive data, including bodycam video, 911 recordings, and jail calls, totaling around 206 GB. This cyber operation was classified as ransomware, with FCIC and Marsy's Law contributing to the incident. Attorney fees ranged from $750 to $25,000 for affected clients, who were also exposed to a 'red flag' Risk Protection Order (RPO).
Technical Mitigations AI-generated
• Block or hunt for 'red flag' Risk Protection Orders (RPO) to prevent potential threats. • Use SCRAM alcohol monitoring systems with secure protocols and regular audits to detect tampering. • Implement Marsy's Law-compliant data handling practices to protect victim and witness information.
Technical Observables Login Required
Indicators of Compromise (IoCs) Protected

Raw threat telemetry, malicious IP addresses, file hashes, and direct VirusTotal correlation are restricted to authenticated users.

ra•••••.live
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
Global Scope
Incident Timeline
‎2026/09/30
Threat actors used Rhysida to publish the contents of Law Offices of R. David Williams, P.A., including case files and police discovery materials.
organisation DUI - Segula
organisation SCRAM
organisation VOP
organisation RPO
victims 2 clients
organisation P.A. Contents
data_breach 911 recordings
Tactical Metrics
Metrics
victims
2
Clients
Metrics
data_breach
911
Recordings
Intelligence Sources