Garrison Law Firm listed on pear ransomware leak site

• Ransomware group: pear
• Country: United States
• Sector: Professional Services
• Announcement date: August 5, 2025

The Garrison Law Firm has been listed on a ransomware leak site by a threat actor known as pear. The announcement, which appeared on August 5, 2025, claims that the organization's data has been exfiltrated by the group.

The claims made by pear

According to the post published by the pear group, the threat actor alleges that they successfully gained access to the systems belonging to the Garrison Law Firm on July 15, 2025. This timeline suggests that the attackers may have maintained presence within the network for several weeks before the public announcement was made on the leak site.

Information regarding the pear group remains limited, as there is very little public information available concerning the identity, methods, or specific history of this threat actor. In the broader landscape of cybercrime, ransomware groups often utilize leak sites to pressure victims into paying ransoms. This tactic is frequently associated with double extortion, where attackers not only encrypt an organization's data but also steal sensitive information to threaten its public release.

Details regarding the alleged data breach

Despite the claim that data has been exfiltrated, the threat actor has not provided specific details regarding the nature of the information stolen. No screenshots or detailed information regarding the nature of the allegedly leaked data have been provided in the announcement.

• No specific data types or file counts were identified in the listing.

When ransomware groups claim a breach, they sometimes provide evidence such as file lists or screenshots to prove the validity of their claims. In this instance, however, the listing remains vague, offering no confirmation of the volume of data or the specific categories of information that were compromised during the alleged intrusion.

About Garrison Law Firm

Garrison Law Firm, LLC is a law firm based in Indiana. The institution specializes in providing legal counsel and representation to individuals in various legal matters. Their areas of expertise include personal injury, car accidents, slip and fall incidents, and wrongful death cases.

Potential implications and organizational risks

Given that Garrison Law Firm specializes in personal injury law, there may be a possibility that the leaked data contains sensitive medical and legal information of clients. This situation could create legal risks for the firm under US state laws and relevant privacy regulations. Furthermore, there may be a risk that clients could be exposed to identity theft or targeted phishing attacks.

The exposure of confidential client information held by law firms could potentially be used for secondary extortion attempts. In such scenarios, attackers may attempt to contact the victims directly using the stolen information to demand additional payments.

For organizations operating within the professional services sector, particularly those handling sensitive client data, such incidents highlight the necessity of robust security postures. General defensive steps for organizations facing these threats often include a thorough review of data security processes and the implementation of protocols to notify affected parties. Maintaining strict access controls and monitoring for unauthorized lateral movement within a network are standard industry practices used to mitigate the risk of exfiltration.