Data Breach Alert: A. Uzzo & Company CPA's
In a significant breach of data security, A. Uzzo & Company CPA’s, a reputable accounting and tax advisory firm based in New York, has fallen victim to a cyber attack perpetrated by the threat actor known as Sinobi. The breach was discovered on December 17, 2025, raising serious concerns about the protection of sensitive financial information.
About A. Uzzo
A. Uzzo & Company CPA's specializes in a variety of financial services, including tax planning, accounting, estate advisory, and consulting services. With a strong reputation in the industry, the firm has been committed to providing reliable financial guidance to clients across the United States. However, this recent breach has put their clients' private information at risk, highlighting the growing vulnerabilities faced by even the most established firms.
What Happened
The breach, attributed to the malicious actions of the Sinobi group, was discovered on December 17, 2025. While the size of the leak remains unknown, the implications of such an incident can be severe, potentially exposing sensitive data such as tax records and personal financial information. This incident underscores the critical importance of cybersecurity measures in safeguarding client trust and confidentiality.
Next Steps
If you are a client or an affected party of A. Uzzo & Company CPA's, it is crucial to take proactive measures to protect your personal information. We encourage you to reach out to SLF (Srourian Law Firm) to discuss your options and receive guidance on how to navigate the aftermath of this data breach. Our team is equipped to assist you in understanding your rights and the steps you can take to mitigate any potential risks.
LINKS:

Srourian Law Firm is investigating a potential class action lawsuit against A. Uzzo for a recent data breach.
If you received a NOTICE OF DATA BREACH letter from A. Uzzo, complete the form below so we can discuss your legal options.
Data Breach at Al-Ahli Saudi FC: What You Need to Know
In a troubling development for one of the premier sports organizations in the Middle East, Al-Ahli Saudi Football Club (Al-Ahli FC) has reportedly experienced a significant data breach. This incident has raised concerns over the security of sensitive information related to players and organizational operations.
About Al-Ahli Saudi FC Data Breach Exposes Player Contracts and Passports
Al-Ahli FC, a professional multi-sport club based in Jeddah and a prominent member of the Saudi Pro League, is now grappling with the ramifications of an alleged data breach. The breach has led to the unauthorized exfiltration of internal documents, which have been leaked on a widely known dark web forum. This incident not only jeopardizes the privacy of its players but also raises serious questions about the club's cybersecurity measures.
What Happened
The breach reportedly involved the theft of over 111 files from the club’s internal infrastructure. Among the compromised data are sensitive documents, including:
- Full names of professional players
- Player employment contracts, including salary and terms
- Passport copies and scans
- National ID documents
- Official club correspondence
- Contact information such as email addresses and phone numbers
- FIFA ID numbers
The responsible party has indicated intentions to target other high-profile Middle Eastern football organizations and the Asian Football Confederation (AFC) database, suggesting that this may not be an isolated incident.
Next Steps
For those affected by the Al-Ahli Saudi FC data breach, it is crucial to take immediate action. At Srourian Law Firm (SLF), we understand the complexities and potential ramifications of such a breach. We encourage individuals whose information may have been compromised to reach out to us to discuss their options. Together, we can explore the best course of action to safeguard your rights and privacy.
LINKS:

Srourian Law Firm is investigating a potential class action lawsuit against Al-Ahli Saudi FC Data Breach Exposes Player Contracts and Passports for a recent data breach.
If you received a NOTICE OF DATA BREACH letter from Al-Ahli Saudi FC Data Breach Exposes Player Contracts and Passports, complete the form below so we can discuss your legal options.
Turing Data Breach: What You Need to Know
In December 2025, Turing.com, a leading AI-powered talent platform based in Palo Alto, experienced a significant data breach. This incident compromised sensitive user and administrative information from EDU Arena, Turing's educational platform designed to provide essential learning tools and model evaluation services. As a result, many individuals may find their personal and professional data at risk.
About Turing & EDU Arena Data Breach Exposes User and Admin Information
Turing connects global software engineering talent with companies, facilitating seamless collaboration in the tech industry. Their educational platform, EDU Arena, is built to enhance the learning experience for researchers and students. However, the recent breach has exposed a wealth of information, including personal and administrative data that could affect users significantly.
What Happened
The breach reportedly occurred in December 2025, with a database dump originating from EDU Arena's administrative infrastructure. The compromised data includes:
- Full names
- Email addresses (including internal company addresses)
- Usernames
- Hashed passwords (utilizing BCrypt encryption)
- Account status (active and verification flags)
- Administrator privileges and dashboard access levels
- Account creation and update timestamps
- Universally Unique Identifiers (UUIDs)
Reports indicate that the breach involves over 415,000 rows of data, potentially affecting a large portion of EDU Arena’s user base and administrative staff.
Next Steps
If you believe you may have been affected by this data breach, it is crucial to take immediate action to protect your personal information. We at SLF (Srourian Law Firm) encourage anyone impacted to reach out to us to discuss your options. Our team can provide guidance and support as you navigate this situation.
LINKS:

Srourian Law Firm is investigating a potential class action lawsuit against Turing & EDU Arena Data Breach Exposes User and Admin Information for a recent data breach.
If you received a NOTICE OF DATA BREACH letter from Turing & EDU Arena Data Breach Exposes User and Admin Information, complete the form below so we can discuss your legal options.
Data Breach Alert: Handala Incident Overview
In a significant cybersecurity incident, Handala has experienced a data breach that has raised alarms across various sectors. The breach was discovered on December 17, 2025, coinciding with the estimated date of the attack. This event has the potential to impact numerous individuals and organizations, highlighting the importance of data security and swift action in the wake of such incidents.
About Operation Octopus: Naftali Bennett
Handala, the entity at the center of this data breach, is known for its involvement in various operational strategies, including those related to cybersecurity. The incident is linked to a larger operation known as "Operation Octopus," which has drawn attention due to its implications for both national security and the protection of sensitive personal data. With prominent figures like Naftali Bennett associated with this operation, the breach underscores the vulnerabilities that exist even within highly secure organizations.
What Happened
On December 17, 2025, Handala fell victim to a sophisticated cyber attack that compromised sensitive data. The exact nature of the information that was breached is still being assessed, but initial reports indicate that both personal and organizational data was at risk. The prompt discovery of the breach allowed for immediate investigation and response efforts, yet the potential fallout remains a concern for many stakeholders.
Next Steps
If you believe you may have been affected by this data breach, it is crucial to take action. We at SLF (Srourian Law Firm) are here to help you understand your options and the steps you can take to protect yourself. We encourage affected parties to reach out to us for a thorough discussion regarding your situation and potential legal remedies. Your data security is our priority, and we are committed to assisting you during this challenging time.
LINKS:

Srourian Law Firm is investigating a potential class action lawsuit against Operation Octopus: Naftali Bennett for a recent data breach.
If you received a NOTICE OF DATA BREACH letter from Operation Octopus: Naftali Bennett, complete the form below so we can discuss your legal options.
Data Breach Alert: DragonForce Ransomware Group Targets Multiple Organizations
About DragonForce Hits Edward J. Kone, Leger & Shaw, GPC Industries
The DragonForce group has posted a list of alleged victims on their data leak site, indicating a multi-sector attack. Among the affected entities are:
- Edward J. Kone, P.A. (USA): A Florida-based law firm specializing in criminal defense, traffic violations, and personal injury cases, serving clients in Palm Beach, Miami-Dade, and Broward Counties.
- Leger & Shaw (USA): A well-established law firm in New Orleans since 1979, focusing on maritime and admiralty law, class actions, and complex commercial litigation.
- GPC Industries (UK): A leading trade supplier based in Lincolnshire, UK, providing high-quality access, handling, and storage products such as ladders and trolleys.
According to the group, the total volume of data exfiltrated exceeds 1.4 terabytes, with specific data sizes reported for each victim:
- Edward J. Kone, P.A.: 398.88 GB
- Leger & Shaw: 763.74 GB
- GPC Industries: 313.61 GB
What Happened
The breach was reported recently, and details surrounding the attack are still emerging. The DragonForce ransomware group has made it clear that they have successfully infiltrated the networks of the mentioned organizations, leading to the unauthorized access and theft of sensitive information. The threat of publishing this data adds an urgent layer of concern for those affected.
Next Steps
If you or your organization is among those affected by this breach, it is crucial to take action. We encourage you to reach out to us at the Srourian Law Firm (SLF) to discuss your options. Our experienced team is here to help you navigate the complexities of data breaches and protect your rights.
LINKS:

Srourian Law Firm is investigating a potential class action lawsuit against DragonForce Hits Edward J Kone, Leger & Shaw, GPC Industries for a recent data breach.
If you received a NOTICE OF DATA BREACH letter from DragonForce Hits Edward J Kone, Leger & Shaw, GPC Industries, complete the form below so we can discuss your legal options.
Data Breach Alert: Pornhub Compromised in Supply Chain Attack
In a significant cybersecurity incident, Pornhub, the world’s largest adult entertainment platform, has reportedly been compromised in a supply chain attack attributed to the analytics vendor Mixpanel. The notorious ShinyHunters extortion group has claimed responsibility for breaching Pornhub's user data and is currently attempting to extort the company. This incident raises critical concerns about user privacy and data security in the digital age.
About Pornhub Extorted by ShinyHunters Following Mixpanel Analytics Breach
Pornhub has confirmed that a cybersecurity incident involving Mixpanel has impacted select Premium users. However, the company has emphasized that their internal systems remain secure and were not breached. In contrast, Mixpanel has disputed the claims made by ShinyHunters, stating that they found no evidence that the specific records in question were stolen during their own recent security incident. This contradiction highlights the complexities and uncertainties surrounding data breaches and their implications for users.
What Happened
The ShinyHunters group claims to have accessed a massive dataset containing approximately 94GB of data, which represents over 200 million records. The compromised data reportedly includes:
- Full email addresses
- Search history keywords
- Watch history (video names and URLs)
- Download activity logs
- Location data
- Timestamps of user activity
This extensive breach not only compromises users' personal information but also poses a significant risk of identity theft and further exploitation.
Next Steps
If you believe you may be affected by this data breach or have concerns about your personal data security, we encourage you to reach out to us at Srourian Law Firm. Our team of legal experts is ready to assist you in understanding your rights and exploring your options in response to this incident. Don’t hesitate to take the necessary steps to protect your personal information.
LINKS:

Srourian Law Firm is investigating a potential class action lawsuit against Pornhub Extorted by ShinyHunters Following Mixpanel Analytics Breach for a recent data breach.
If you received a NOTICE OF DATA BREACH letter from Pornhub Extorted by ShinyHunters Following Mixpanel Analytics Breach, complete the form below so we can discuss your legal options.
Data Breach: SASP SNCC Automatisme Solutions Process Hit by Crypto24 Ransomware Group
In a troubling new development in the realm of cybersecurity, SASP SNCC Automatisme Solutions Process (SASP), a prominent French company specializing in industrial automation and cybersecurity, has fallen victim to a ransomware attack by the notorious Crypto24 group. This incident highlights the ongoing threat posed by cybercriminals and the importance of data security in today’s digital landscape.
About SASP SNCC Automatisme Solutions Process
SASP SNCC Automatisme Solutions Process is recognized for its innovative solutions in industrial automation and control systems, alongside providing robust cybersecurity services. With a focus on enhancing operational efficiency and safety in industrial environments, their expertise has made them a significant player in the industry. However, this recent breach raises serious concerns about the security of sensitive data and the vulnerabilities that exist within even the most secure organizations.
What Happened
Recently, the Crypto24 ransomware group claimed responsibility for breaching SASP, listing the organization on their dark web leak site. This announcement was accompanied by a countdown timer, indicating that the company has approximately five days to respond to the extortion demands before the stolen information may be published or sold. While the exact details of the compromised data have not been fully disclosed, the implications of such a breach can be severe, affecting not only the company but also its clients and stakeholders.
Next Steps
If you believe you may be affected by this breach or have concerns about your data security, it is crucial to take immediate action. We at SLF (Srourian Law Firm) are here to support you. We encourage affected parties to reach out to us to discuss your options and understand the steps you can take to protect your interests. Cybersecurity incidents like this underscore the importance of being proactive in safeguarding your data. Don't hesitate to seek professional advice during this critical time.
LINKS:

Srourian Law Firm is investigating a potential class action lawsuit against SASP SNCC Automatisme Solutions Process Hit by Crypto24 for a recent data breach.
If you received a NOTICE OF DATA BREACH letter from SASP SNCC Automatisme Solutions Process Hit by Crypto24, complete the form below so we can discuss your legal options.
Amla Commerce Data Breach: What You Need to Know
In December 2025, a significant data breach was reported involving Amla Commerce, a well-known e-commerce platform. The breach, attributed to the hacking group Dragonforce, has raised concerns about the security of personal information and the potential risks faced by users. This article provides an overview of the incident, the affected parties, and the steps to take if you believe your data may be compromised.
About Amla Commerce
Amla Commerce is a prominent player in the e-commerce landscape, offering a range of products and services to consumers and businesses alike. Known for its commitment to customer satisfaction and robust online shopping experiences, the company has built a reputation for reliability. However, the recent breach has put a spotlight on the vulnerabilities that even well-established companies face in today's digital environment.
What Happened
The data breach occurred on December 16, 2025, when the hacking group Dragonforce successfully infiltrated Amla Commerce's security systems. This attack was discovered the following day, on December 17, 2025. Preliminary investigations suggest that sensitive customer data may have been accessed, putting numerous individuals at risk of identity theft and other malicious activities.
Next Steps
If you believe you may have been affected by the Amla Commerce data breach, it is crucial to take immediate action. We at SLF (Srourian Law Firm) are here to assist you in understanding your options and protecting your rights. We encourage all affected parties to reach out to us for a consultation on how to navigate the aftermath of this incident. Your security and peace of mind are important to us.
LINKS:

Srourian Law Firm is investigating a potential class action lawsuit against Amla Commerce for a recent data breach.
If you received a NOTICE OF DATA BREACH letter from Amla Commerce, complete the form below so we can discuss your legal options.
Crypto24 Data Breach: What Affected Parties Should Know
Crypto24 Data Breach: What Affected Parties Should Know
In a startling development, Crypto24, a prominent player in the cryptocurrency industry, experienced a significant data breach on December 17, 2025. This incident raises serious concerns about the security of personal and financial information, and it is crucial for affected individuals to understand what this means for them.
About SASP SNCC AUTOMATISME SOLUTIONS PROCESS
SASP SNCC AUTOMATISME SOLUTIONS PROCESS is an organization that specializes in automated solutions for various industries, including the cryptocurrency sector. Their advanced systems are designed to enhance operational efficiency, but this recent breach has highlighted vulnerabilities that can compromise sensitive data.
What Happened
The breach was discovered on the same day it occurred, December 17, 2025. It is believed that unauthorized individuals accessed confidential data, potentially affecting thousands of users. This incident underscores the ongoing challenges that organizations face in safeguarding their systems against cyber threats.
Next Steps
If you believe that you are affected by this data breach, it is imperative to take action promptly. We at Srourian Law Firm (SLF) are here to help you navigate the complexities of this situation. We encourage you to reach out to us to discuss your options and understand your rights in the aftermath of this breach.
Stay informed and proactive to protect your personal information during these challenging times.
LINKS:

Srourian Law Firm is investigating a potential class action lawsuit against SASP SNCC AUTOMATISME SOLUTIONS PROCESS for a recent data breach.
If you received a NOTICE OF DATA BREACH letter from SASP SNCC AUTOMATISME SOLUTIONS PROCESS, complete the form below so we can discuss your legal options.
CES Group Engineers, LLP Breach Investigation
CES Group Engineers, LLP Breach Investigation
Data breaches can have serious implications for both individuals and organizations. Recently, CES Group Engineers, LLP experienced a significant data breach that has affected a total of 130 individuals. If you believe you may be one of those impacted, it is crucial to understand your options and the steps to take moving forward.
About CES Group Engineers, LLP
CES Group Engineers, LLP is a commercial organization located at 3525 Whitehall Park Drive, Charlotte, NC 28273. They provide various engineering services and are committed to maintaining the integrity of their clients' data. However, recent events have highlighted vulnerabilities within their data security protocols.
What Happened
On August 20, 2025, CES Group Engineers, LLP suffered an external system breach due to hacking. The breach was discovered on November 10, 2025, leading to immediate concerns over the security of personal information stored within their systems. The organization took prompt action and notified affected individuals through a written notification sent out on December 16, 2025.
As a precautionary measure, CES Group Engineers, LLP has offered identity theft protection services for a duration of 12 months through CyEx, which includes credit monitoring and identity theft protection to help mitigate any potential risks stemming from the breach.
Next Steps
If you believe you may be one of the affected parties in this data breach, we encourage you to reach out to us at Srourian Law Firm (SLFLA). Our team is here to discuss your options and help you navigate the complexities of data breach claims. Don't hesitate to contact us for assistance.
LINKS:

Srourian Law Firm is investigating a potential class action lawsuit against CES Group Engineers, LLP for a recent data breach.
If you received a NOTICE OF DATA BREACH letter from CES Group Engineers, LLP, complete the form below so we can discuss your legal options.










