Ramar & Paradiso Listed by pear Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

When a law firm that handles medical malpractice, health-care matters and corporate disputes appears on a ransomware group’s leak site, the people most directly concerned are its clients, former clients and anyone whose personal or medical details may sit inside the firm’s files. Public reporting so far does not confirm how many individuals are involved or exactly which records left the firm’s systems, yet the mere claim of exfiltration is enough to raise practical questions about privacy, identity risk and the security of sensitive legal and health information.

On 8 August 2025 the firm Ramar & Paradiso was listed by the ransomware group known as pear. The listing asserts that internal files were taken in a ransomware attack. No independent confirmation of the volume of data, the precise contents or the number of people affected has been made public, so the full scope remains unconfirmed.

What happened

According to the available record, Ramar & Paradiso was named on pear’s leak site on 8 August 2025. The group claims that internal files were exfiltrated during a ransomware attack. No further technical details—such as the initial access method, the duration of the intrusion, encryption of systems, or any ransom demand—have been disclosed in the public summary. The number of people whose information may have been involved is listed as unknown. At present the incident rests on the group’s own claim of a listing and of data theft; independent verification of those claims has not been reported.

Who is pear?

Pear is a ransomware operation that has appeared in public threat reporting as a group that conducts double-extortion attacks: it steals data before encrypting systems and then threatens to publish the stolen material if a ransom is not paid. Like many such groups, it maintains a leak site where it posts victim names and, at times, samples of purportedly stolen files. Its listings are claims made by the actors themselves and are not automatically verified by outside parties. Public knowledge of pear’s broader activity does not extend to confirmed technical details of this particular incident beyond the firm’s appearance on the site and the assertion that internal files were taken.

About Ramar & Paradiso

Ramar & Paradiso is a law firm whose practice areas include medical-malpractice defense, health-care law, corporate law, contract disputes and appeals. Firms of this type routinely hold large volumes of confidential material: client correspondence, medical records and expert reports related to malpractice cases, corporate contracts, financial documents and personal identifying information of clients, opposing parties and witnesses. Because the firm works at the intersection of health care and litigation, the data it stores can be especially sensitive. A breach claim against such an organisation therefore carries consequences that go beyond ordinary business disruption; it touches on medical privacy, legal privilege and the personal security of individuals who entrusted the firm with their information.

What data was at risk

The only data type named in the public record is “internal files exfiltrated in ransomware attack.” No inventory of specific document categories, file counts or data fields has been released. Law firms specialising in medical malpractice and health-care matters typically maintain medical records, patient histories, billing information, Social Security numbers or other identifiers, litigation files, settlement documents and corporate records. Whether any of those categories were among the files pear claims to have taken remains unconfirmed. Until the firm or an independent investigation provides a verified list, the exact contents of the exfiltrated material must be treated as unknown.

The real-world impact

For individuals whose data may have been involved, the primary risks are identity theft, medical-identity fraud, targeted phishing and the unwanted exposure of private health or legal matters. Even if the files contain only partial records, criminals can combine them with other publicly available information to craft convincing scams or open fraudulent accounts. For the firm itself, the consequences include potential regulatory scrutiny under health-privacy and data-protection rules, possible civil claims from clients, reputational harm and the operational cost of investigation and remediation. Because the number of affected people is unknown and the precise data types unconfirmed, the scale of these impacts cannot yet be measured; the risk, however, is concrete for anyone who has been a client or whose personal information appears in the firm’s case files.

If your data was in this claimed breach

If you have been a client of Ramar & Paradiso or believe your information may have been held by the firm, begin by monitoring financial and medical accounts for unexpected activity and consider placing a fraud alert or credit freeze with the major credit bureaus. Review any correspondence from the firm for official breach notifications and follow any guidance it provides. Change passwords on related accounts and enable multi-factor authentication where available. You can also run a free exposure scan of your email address to check whether your information has already appeared in known breach data sets; such a scan does not prove involvement in this specific incident but can surface earlier exposures that warrant attention. Stay alert for phishing messages that reference legal or medical matters, and report any confirmed misuse of your data to the appropriate authorities.

AICompiled with AI assistance from public sources and published under our editorial standards.