Cullen, Haskins, Nicholson & Menchetti listed on pear ransomware leak site

• Ransomware group: pear
• Country: United States
• Sector: Professional Services
• Announcement date: September 14, 2025

Law firm targeted by pear ransomware group

The Illinois-based law firm Cullen, Haskins, Nicholson & Menchetti has been listed on the leak site of the ransomware group known as pear. This announcement, made on September 14, 2025, follows an incident that the threat actor claims occurred on August 27, 2025. The group has published various documents on its platform that allegedly belong to the law firm, marking a potential data breach involving sensitive legal and personal information.

Details of the claimed incident

The threat actor known as pear announced that it obtained data from the firm following an incident it claims occurred on August 27, 2025. According to the announcement, the group has published various documents allegedly belonging to the law firm on its leak site. While the group has taken credit for the intrusion, public information regarding the specific identity and operational details of the pear group remains limited in the public domain.

Ransomware groups often utilize leak sites to pressure organizations into paying ransoms. This process frequently involves double extortion tactics, where the attackers not only encrypt an organization's systems but also steal sensitive data. By threatening to release this stolen information publicly, the attackers aim to maximize their leverage. The publication of data via these methods can create a foundation for secondary attacks or highly targeted phishing attempts against the affected parties.

Alleged data types involved in the leak

The screenshots shared in the announcement appear to contain a variety of sensitive documents. The information allegedly exposed includes:

• Insurance policies
• Tax forms (1040)
• Personal contact information
• Medical records
• Legal correspondence

The disclosure of such a wide range of data types suggests a significant breach of privacy, as these documents often contain highly sensitive personal and financial details.

About Cullen, Haskins, Nicholson & Menchetti

Cullen, Haskins, Nicholson & Menchetti is a law firm representing injured workers in Illinois state compensation cases. The firm specializes in workers' compensation claims, a field that necessitates the handling of highly confidential client information, including medical and legal records.

Potential impact and organizational considerations

The allegedly leaked data may increase the risk of identity theft for both clients and employees of the firm. Given the specific nature of the law firm's practice, the disclosure of sensitive information protected by attorney-client privilege could lead to significant legal and reputational consequences for the institution. Because the firm is based in the United States, state-level data protection laws and potential breach notification obligations may apply to the situation.

For organizations operating within the professional services sector, particularly those handling sensitive legal or medical data, such incidents highlight the necessity of robust cybersecurity frameworks. Defensive measures typically include implementing strict access controls, utilizing multi-factor authentication, and maintaining regular, encrypted backups. Furthermore, organizations must be prepared to navigate the complex legal landscape regarding data protection and notification requirements following a potential breach.

The use of double extortion tactics by groups like pear poses a continuous threat to professional service providers. When sensitive documents like tax forms and medical records are involved, the impact extends beyond the immediate organization to the individuals whose data has been compromised. This creates a long-term risk of targeted social engineering attacks, where criminals use the stolen information to gain trust during phishing campaigns.