Richard J. Hackerman P.A. listed on pear ransomware leak site
US-based law firm Richard J. Hackerman P.A. has been listed on the leak site of the threat group known as pear.
- Published
- 2 min read
- 2 min read
- Ransomware group: pear
- Country: United States
- Sector: Professional Services
- Announcement date: March 30, 2026
A new data breach claim targeting a US law firm
The threat actor known as pear has officially listed the United States-based law firm Richard J. Hackerman P.A. on its dedicated leak site. The announcement, which appeared on March 30, 2026, follows a claimed attack date of March 26, 2026. According to the threat group, they have successfully gained unauthorized access to the firm's internal systems and have exfiltrated various categories of sensitive information.
The listing serves as a public claim of a successful cyberattack targeting the firm's operations. While the group has posted the organization's name on their platform, specific details regarding the total volume of data stolen or the exact amount of the ransom demand have not been provided in the announcement.
Details of the claimed data exfiltration
The threat group pear claims to have stolen a wide array of sensitive documentation during their intrusion. The information allegedly exfiltrated from the firm's systems includes highly confidential records that are central to legal and financial proceedings. The group asserts that the breach involves the following types of data:
- Financial documents
- Tax returns
- Court reports
- Client information
- Email correspondence
- Legal documents
The nature of these files suggests a significant breach of confidentiality, as they encompass the core components of legal and financial practice. The presence of such diverse data types on a leak site is a common tactic used by ransomware groups to exert pressure on their victims.
About Richard J. Hackerman P.A.
Richard J. Hackerman P.A. is a professional legal services firm located in Baltimore, United States. The firm specializes in providing legal expertise in highly sensitive areas, specifically focusing on tax law and bankruptcy law. Due to the nature of these specialties, the firm handles a high volume of confidential financial and legal documentation for its clients.
Risk assessment and industry implications
This incident poses a potentially high risk to the organization and its clients. Because law firms typically hold vast amounts of sensitive client data, such breaches can lead to severe consequences. The leaked information could potentially be used by malicious actors for identity theft or to launch highly targeted phishing attacks against the firm's client base. Furthermore, the firm may face significant legal liabilities under United States federal laws as well as various state-level data privacy regulations.
While public information regarding the specific methods and identity of the pear group remains limited, this type of leak is often indicative of a double-extortion scheme. In such scenarios, attackers not only encrypt a victim's data to disrupt operations but also steal the data to threaten its public release unless a ransom is paid. This dual approach increases the pressure on the target organization to comply with demands.
In general, when organizations in the professional services sector face such threats, they often find it necessary to notify affected clients and initiate formal legal procedures to mitigate the impact of the breach. Defensive measures for such organizations typically involve robust encryption, strict access controls, and continuous monitoring to detect unauthorized exfiltration attempts. The potential for identity theft and legal repercussions makes the protection of client confidentiality a paramount concern for firms operating in the legal and financial sectors.