Powell, Powell & Powell, P.A. listed on pear ransomware leak site

• Ransomware group: pear
• Country: United States
• Sector: Professional Services
• Announcement date: April 9, 2026

Law firm targeted by pear ransomware group

The ransomware group known as pear has listed the United States-based law firm Powell, Powell & Powell, P.A. on its leak site. According to an announcement made by the group, the organization has been targeted in a cyberattack involving data exfiltration. This type of activity is common in modern ransomware operations, where threat actors employ double extortion tactics. In these scenarios, attackers do not merely encrypt an organization's systems to demand a ransom for decryption; they also steal sensitive information and threaten to release it publicly to increase the pressure on the victim to pay.

The claim made by the pear group suggests that the breach occurred earlier in the month. Specifically, the group alleges that they obtained access to the firm's internal systems on April 6, 2026. The public announcement detailing the attack was subsequently posted on the group's leak site on April 9, 2026. While the group has claimed responsibility for the breach and the theft of data, the incident remains an allegation from the threat actor.

Alleged exfiltration of sensitive legal and personal data

The announcement published by pear provides specific details regarding the types of information they claim to have stolen from the law firm. The group asserts that the exfiltrated data contains highly sensitive materials that are critical to the firm's operations and the privacy of its clients. According to the group's claims, the stolen information includes a variety of documents and records that could be highly damaging if released to the public.

The specific categories of data mentioned in the group's claim include:

• Financial data
• Client information
• Medical records
• Legal correspondence

The group has threatened to release this information to the public if their demands are not met. No information was provided regarding the total size of the data stolen or the specific number of files involved in the breach. Furthermore, the group has not disclosed a specific ransom demand in their announcement.

About Powell, Powell & Powell, P.A.

Powell, Powell & Powell, P.A. is a professional services organization operating within the United States. The firm specializes in legal matters specifically related to personal injury cases. Given the nature of their practice, the firm handles sensitive information involving medical histories, financial details, and legal documentation for individuals seeking compensation for injuries.

Potential risks and industry implications

The alleged breach of a law firm specializing in personal injury carries significant risks for the affected clients. The exfiltration of data protected by attorney-client privilege is particularly concerning, as it could lead to legal consequences regarding the firm's professional responsibilities and its compliance with state-level data protection regulations in the United States. For the clients, the exposure of such information may increase the risk of identity theft and fraud.

Beyond the immediate privacy concerns, there is a secondary risk that the leaked data could be utilized by malicious actors to conduct highly targeted phishing attacks. When attackers possess detailed legal and medical correspondence, they can craft much more convincing and deceptive communications to target individuals or the firm itself.

This incident highlights the critical importance of robust cybersecurity measures for professional service firms. Organizations in this sector often handle a concentrated amount of sensitive data, making them attractive targets for ransomware groups. To mitigate such risks, organizations typically implement defensive strategies such as multi-factor authentication, regular security awareness training, and rigorous data encryption protocols. Additionally, maintaining comprehensive incident response plans and ensuring regular, offline backups are essential components of a modern security posture. As public information regarding the pear group remains limited, the firm may be required to initiate necessary legal procedures and notify its clients regarding the potential exposure of their information.