Hankin & Mazel, PLLC listed on pear ransomware leak site

• Ransomware group: pear
• Country: United States
• Sector: Professional Services
• Announcement date: August 5, 2025

The pear ransomware group claims a breach at Hankin & Mazel, PLLC

The law firm Hankin & Mazel, PLLC has been listed on the leak site of the ransomware group known as pear. According to the announcement made on August 5, 2025, the threat actor claims to have successfully compromised data belonging to the firm. While the group has published an announcement regarding the incident, public information regarding the specific operations and background of the pear group remains limited.

Ransomware attacks often involve a tactic known as double extortion. In these scenarios, threat actors do not merely encrypt an organization's files to disrupt operations; they also exfiltrate sensitive data before the encryption occurs. The goal is to threaten the victim with the public release of this stolen information on a leak site if a ransom is not paid. This pressure tactic aims to maximize the impact of the attack by leveraging the potential reputational and legal consequences of a data leak.

Details of the alleged attack and data exposure

The threat actor known as pear claims that the compromise of Hankin & Mazel, PLLC occurred on July 28, 2025. To support their claims, the group has shared several documents as samples, which are alleged to have been obtained directly from the firm's internal systems. These samples provide a glimpse into the types of information that the group asserts they have accessed.

The shared samples include screenshots of various personal identification documents. Based on the information provided by the group, the affected data types include:

• Identity documents
• Passports
• Driver's licenses

The presence of such sensitive documentation in a leak site announcement suggests a significant breach of privacy. When identity documents are exfiltrated, it significantly increases the risk of identity theft and fraud for the individuals whose information has been compromised. Such data can be used by malicious actors to impersonate victims in various fraudulent schemes.

About Hankin & Mazel, PLLC

Hankin & Mazel, PLLC is a New York-based law firm. The firm has a long-standing history in the legal sector, having represented cooperative and condominium boards for over 30 years. They specialize in providing professional legal services specifically within the field of real estate law.

Implications and risks for professional services

The alleged leak of sensitive personal information carries heavy implications for both the organization and the individuals involved. Because the data may contain sensitive personal information belonging to the firm's clients or employees, the incident could lead to heightened risks of identity theft and fraud for those affected. Furthermore, as the institution is based in the United States, the incident may require evaluation within the framework of state-level data protection laws and potential legal obligations.

For a law firm, the risks extend beyond simple data privacy. Secondary risks regarding client confidentiality and attorney-client privilege may arise due to the nature of the profession. Such breaches can damage the trust that clients place in their legal representatives. Consequently, the firm may be required to initiate data breach notification processes and inform the affected parties as part of their legal and ethical obligations.

Organizations in the professional services sector often face unique challenges when defending against such threats. To mitigate these risks, companies generally focus on robust defensive measures, such as implementing multi-factor authentication, maintaining rigorous patch management schedules, and conducting regular security awareness training for employees. Additionally, maintaining comprehensive logging and monitoring can help in the early detection of unauthorized access, potentially limiting the scope of a data exfiltration event.