The Odom Firm listed on pear ransomware leak site

• Ransomware group: pear
• Country: United States
• Sector: Professional Services
• Announcement date: February 26, 2026

The Odom Firm targeted by pear ransomware group

The Odom Firm has been listed on the leak site of the pear ransomware group. According to the announcement made by the threat actor, the firm has been targeted in a cyberattack that reportedly occurred on February 23, 2026. The listing, which appeared on the group's leak site on February 26, 2026, claims that the attackers successfully gained access to the firm's network and exfiltrated sensitive information.

Details of the claimed attack

The threat actor known as pear has added The Odom Firm to its public leak site. The group claims to have breached the organization's network infrastructure. While the listing provides general information regarding the operations of the firm, it specifies that the incident took place on February 23, 2026. The announcement type is categorized as a data breach, indicating that the primary objective or outcome of the intrusion involves the unauthorized removal of information from the victim's environment.

Ransomware groups often utilize leak sites as a tool for double extortion. In these scenarios, attackers do not merely encrypt files to disrupt operations; they also steal sensitive data to use as leverage. By threatening to publish stolen information, the group attempts to pressure the victim into paying a ransom to prevent the public release of confidential files. This tactic significantly increases the pressure on organizations, as the breach of confidentiality can lead to long-term reputational and legal consequences.

Alleged exfiltrated data types

Based on the screenshot provided in the listing, the group claims to have stolen a variety of sensitive documents. The data allegedly exfiltrated includes:

• Corporate documents
• Confidential data
• Tax records
• Court reports
• Case files
• Agreements
• Personnel information

No specific information was provided regarding the total size of the data stolen or the exact number of files involved. Additionally, no ransom demand has been publicly disclosed in the source provided.

Implications and sector risks

This incident suggests that the law firm may be at high risk regarding client confidentiality and sensitive legal data. The potential publication of exfiltrated data could lead to identity theft or targeted phishing attacks against the firm's clients. Because law firms handle a vast amount of third-party data, they often represent a significant risk for supply chain attacks, where attackers target a service provider to gain access to the data of many different clients.

As a United States-based entity, the firm may face legal consequences under state-level data breach notification laws and professional ethical standards. Organizations in the professional services sector must navigate complex regulatory landscapes when sensitive client information is compromised. The loss of court reports, case files, and agreements can undermine the integrity of legal proceedings and the trust between a firm and its clients.

To defend against such threats, organizations typically implement various security measures. These include robust network monitoring to detect unauthorized access, encryption of sensitive data at rest and in transit, and strict access controls to limit the movement of attackers within a network. Regular security audits and employee training on phishing awareness are also standard defensive steps to mitigate the risk of initial entry and subsequent data exfiltration.

Limited information on the threat actor

It should be noted that public information regarding the pear group is currently limited. As with many emerging ransomware threats, the full scope of their tactics, techniques, and procedures may not be fully documented in public intelligence feeds.