Gerson & Schwartz Accident & Injury Lawyers targeted by pear ransomware group
Miami-based law firm Gerson & Schwartz Accident & Injury Lawyers has been listed on the leak site of the threat actor known as pear.
- Published
- 3 min read
- 3 min read
- Ransomware group: pear
- Country: United States
- Sector: Professional Services
- Announcement date: November 3, 2025
The pear ransomware group claims a breach at Gerson & Schwartz
The Miami-based law firm Gerson & Schwartz Accident & Injury Lawyers has been listed on the leak site of a threat actor known as pear. According to an announcement published on November 3, 2025, the group claims to have successfully targeted the firm, alleging that they gained unauthorized access to the organization's systems on October 29, 2025. The threat actor has stated that they have obtained the firm's data and is currently threatening to publish the stolen information.
In modern cyberattack trends, such listings are often a hallmark of double extortion tactics. In these scenarios, threat actors do not merely encrypt an organization's data to disrupt operations; they also exfiltrate sensitive information to use as leverage. By threatening to release private files on a public leak site, the attackers aim to pressure the victim into paying a ransom to prevent the exposure of confidential data. While the specific ransom demand for this incident has not been disclosed, the threat of public disclosure remains a primary motivator for such attacks.
Reported data types involved in the incident
The announcement made by the pear group specifies that the stolen data includes a wide variety of sensitive information. Based on the claims made by the threat actor, the compromised data reportedly consists of the following items:
- Partner and client information
- Case files
- Medical records
- Accident reports
- Invoices
- Internal and external correspondence
The nature of this data suggests a significant breach of confidentiality. When sensitive documents such as medical records and case files are involved, the impact of a leak extends beyond simple operational disruption, moving into the realm of privacy violations and potential identity theft for the individuals represented by the firm.
About Gerson & Schwartz Accident & Injury Lawyers
Gerson & Schwartz is a law firm based in Miami, Florida. The firm specializes in representing victims in legal cases involving accidents, injuries, and wrongful death. Due to the nature of their practice, the firm handles highly sensitive information regarding personal injuries and medical histories, which are central to their legal representation of clients.
Implications and risks for the legal sector
This incident may pose a significant risk due to the potential exposure of sensitive personal and medical data belonging to the firm's clients. Given the nature of law firms, the leaked data could violate client confidentiality and lead to legal repercussions under US state laws and professional regulations. The exposed information may cause clients to be subjected to identity theft or targeted phishing attacks.
Furthermore, the firm may face reputational damage and a loss of client trust. For professional service providers, the integrity of client-attorney privilege is paramount; a breach of this nature can undermine the fundamental trust required in legal relationships. While public information regarding the activities and capabilities of the pear group remains limited, the threat they pose to sensitive data repositories is evident.
To defend against such threats, organizations in the professional services sector typically implement various defensive measures. These include robust encryption for data at rest and in transit, multi-factor authentication to secure access to sensitive systems, and continuous monitoring to detect unauthorized access. Additionally, regular security awareness training can help prevent initial access through phishing, and maintaining offline, immutable backups can assist in recovery efforts. However, in cases involving data exfiltration, the primary challenge remains the protection of privacy and the mitigation of the impact caused by the potential public release of sensitive information.