The Danvers Law Offices listed on pear ransomware leak site

• Ransomware group: pear
• Country: United States
• Sector: Professional Services
• Announcement date: August 5, 2025

The Danvers Law Offices targeted by pear ransomware group

The Danvers Law Offices, a professional services firm based in the United States, has been listed on a leak site associated with the ransomware group known as pear. According to an announcement posted on August 5, 2025, the group claims to have gained unauthorized access to the firm's network. The threat actor group has asserted that they successfully exfiltrated various documents from the organization's systems during an attack that reportedly took place on July 17, 2025.

Details of the claimed attack

The pear group has published a notice on their dedicated leak site claiming responsibility for the breach. The announcement suggests that the attackers obtained unauthorized access to the firm's internal network, allowing them to steal various files. The group has stated their intention to either release the stolen data publicly or sell it to other malicious actors on the dark web.

While the group has made these claims, they have not provided specific details regarding the total volume of data stolen or the exact number of files involved. Furthermore, no information has been provided regarding a specific ransom demand or the total amount of money requested to prevent the release of the data. The announcement is categorized as a data leak notification.

Potential data exposure

Based on the information provided by the threat actor, the breach involves sensitive documentation related to the firm's operations and clients. The group has provided screenshots as evidence, which reportedly display samples of specific document types. The data identified in the listing includes:

• Invoices
• Legal forms

The exposure of such documents suggests that sensitive client information held by the law firm may be at risk of being leaked to the public or sold to third parties.

About The Danvers Law Offices

The Danvers Law Offices is a boutique personal injury law firm. Since 2005, the firm has been providing legal services to residents throughout the states of Massachusetts and New Hampshire.

Implications and industry risks

This incident highlights the significant risks faced by professional services firms, particularly law offices that handle highly sensitive client information. The potential exposure of legal forms and invoices could lead to serious consequences for the affected parties. Clients of the firm may face an increased risk of identity theft or may become targets for highly specific, targeted phishing attacks designed to exploit the leaked information.

Because the organization operates within the United States, this incident could trigger legal proceedings under various state-level data privacy laws. Additionally, the firm may be subject to professional conduct regulations governing the protection of client confidentiality. The nature of the threat suggests the possible use of the double extortion method. In a double extortion scenario, attackers not only encrypt an organization's data to disrupt operations but also steal sensitive information to use as leverage, threatening to leak it if the ransom is not paid. This method is used to increase the pressure on the organization to comply with demands.

For organizations in the professional services sector, maintaining robust cybersecurity postures is critical. Common defensive strategies include implementing multi-factor authentication, maintaining regular offline backups, and conducting regular employee training to recognize phishing attempts. Given the limited public information available regarding the pear group, organizations should remain vigilant against evolving ransomware tactics that prioritize data exfiltration alongside encryption.