
The ransomware group INC Ransom recently says it has infiltrated the Pennsylvania Attorney General’s internal computer systems, stealing 5.7 terabytes of highly confidential data.
On August 11, in a press release, the Pennsylvania Attorney General’s office reported experiencing a significant network outage that disrupted its official website, email services, and landline communications. State officials immediately launched an investigation, with assistance from external cyber security experts, to determine the nature and scope of the incident.
“The network that hosts the Office of Attorney General’s systems is currently down, meaning the office’s website is offline, as are office email accounts and land phone lines. We are taking steps to determine the cause of the cyber incident, and working to restore services on all avenues,” state officials said.
In a statement shared with the media, Attorney General Dave said, “This is a frustrating situation, and everyone is doing their very best. I am grateful for the dedication and professionalism of our Information Technology staff who are working around the clock to resolve the matter. In collaboration with our law enforcement partners, we will work diligently to restore systems. We will continue to do the work of protecting Pennsylvanians no matter the obstacle.”
On August 29, the Attorney General’s office announced that the network disruption resulted from a ransomware attack, during which threat actors infiltrated its internal network, stole confidential data, and encrypted critical systems.
“The interruption was caused by an outsider encrypting files in an effort to force the office to make a payment to restore operations. No payment has been made,” the Attorney General’s Office said.
#Hacking group INC Ransom claimed responsibility for the #cyberattack on the Pennsylvania Office of Attorney General (@PAAttorneyGen). The group has started publishing the data stolen during the attack.
— VenariX (@_venarix_) September 21, 2025
We've updated the incident report in VenariX with the categories of data… pic.twitter.com/Os8JpdFoRf
The INC Ransom ransomware group has recently claimed responsibility for the cyber attack on the Pennsylvania Attorney General’s office, listing it as a victim on its data leak site. The group claimed it has exfiltrated 5.7TB of sensitive data, including access to “internal network of FBI and more.”
© 2025, Lyonsdown Limited. teiss® is a registered trademark of Lyonsdown Ltd. VAT registration number: 830519543