HackerFeeds
All ransomware incidents
J

Ransomware group rhysida hits Juge, Napolitano, Ruli, Putfark & Pittman

HIGH
·Professional Services·2026-11-04

Juge, Napolitano, Ruli, Putfark & Pittman — a professional services target has been listed by the rhysida ransomware group on 2026-11-04. The information below reflects what the threat actor has publicly claimed on their leak site; the details have not been independently verified.

Incident Report

Target OrganizationJuge, Napolitano, Ruli, Putfark & Pittman
Threat Group
rhysida
SummaryJuge, Napolitano, Ruli, Putfark & Pittman, a professional services organization, was listed by the rhysida ransomware group on its leak site on 2026-11-04.
Date of Breach2026-11-04
Discovery Date2026-11-04
Region—
Target Domain—
Business SectorProfessional Services
Severity
HIGH

Claim by rhysida

Juge, Napolitano, Ruli, Putfark & Pittman Juge, Napolitano, Ruli, Putfark & Pittman / 'WC Defense' - insurer & corporate defense law firm.The Juge Firm (Metairie / Covington, LA, founded 1983) is one of the oldest workers' compensation defense law firms, protecting employers, insurers and TPAs against injured workers' claims.Clients (148 client-guideline files): Sedgwick, Gallagher Bassett, Broadspire/Crawford,ESIS/ACE, AIG, Allstate, Chubb, Zurich, Amazon, Walmart, Home Depot, CVS Health, FedEx, Lyft, Costco, Hilton, Northrop Grumman, State Farm,Travelers, Coca-Cola, Fluor, GEO Group, Archdiocese of New Orleans, the cities of New Orleans / Baton Rouge / Shreveport, and others.2,383,324 files, ~3.2 TB.- 4,477 full workers' comp defense case files: 175,993 PDFs, 73,239 DOCX, 61,622 DOC, 55,798 MSG emails, 28,244 TIF scans;- claimant medical imaging: 6,461 DICOM files (MRI/CT/X-ray);- 28,410 medical EOBs and disputed LDOL-WC-1008 claims (full PII + diagnoses of injured workers);- 1,884 new-file intake sheets with complete claimant PII (SSN, address, DOB, injury);- 3,265 counterparty W-9 forms (EINs, signatures, current 2024�2025);- 850 claimant surveillance videos ('Surveillance', 214 GB) - covert footage of injured workers;- inbound attorney-correspondence faxes, live ECF/PACER court logins, and 148 confidential insurer client guidelines. More

Posted by the rhysida threat actor on its public leak site. This is the group's own statement and has not been independently verified by HackerFeeds.

Sources

Leak post (onion / Tor)

tor

http://rhysidafohrhyy2aszi7bm32tnjat5xri65fopcxkdfxhi4tidsg7cad.onion/archive.php?company=298

Open this URL in Tor Browser. Browsing leak sites carries real risk — view passively, never click further.

Disclaimer

HackerFeeds does not engage in the exfiltration, downloading, taking, hosting, viewing, reposting, or disclosure of any stolen information. All breach data reported here is sourced from publicly available threat intelligence feeds for awareness purposes only.