Richard J. Hackerman P.A. Listed by pear Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

Richard J. Hackerman P.A., a Baltimore law firm specializing in tax and bankruptcy matters, was listed on March 30, 2026, by the ransomware group pear. The listing states that internal files were exfiltrated during a ransomware attack. The number of individuals affected remains unknown, and no further details on the scope or confirmation of the data handling have been made public. This incident reflects a continuing pattern in which ransomware operators target professional services firms that hold concentrated sets of personal and financial records. Such listings appear regularly on leak sites maintained by these groups, though independent verification of the underlying claims is often limited at the time of initial reporting.

What happened

The available information indicates that pear listed Richard J. Hackerman P.A. on its leak site on March 30, 2026. The entry asserts that internal files were taken in the course of a ransomware operation. No public statement from the firm, law-enforcement notice, or independent report has disclosed the number of records involved, the precise timing of the intrusion, or the method of initial access. The scale of any data exposure therefore remains unconfirmed.

The group behind it: pear

Pear is a ransomware operator that maintains a public leak site where it lists organizations it claims to have compromised. Groups of this type commonly combine file encryption with the removal of data copies, then pressure victims by threatening to publish the material. Pear has appeared in multiple prior listings involving professional services and other sectors that process sensitive records. The listing of Richard J. Hackerman P.A. constitutes the group’s claim; no independent confirmation of the intrusion or the exfiltration has been reported.

Who is Richard J. Hackerman P.A.?

Richard J. Hackerman P.A. operates as a law firm in Baltimore focused on tax law and bankruptcy proceedings. Organizations of this kind routinely collect and store client financial statements, tax returns, court filings, and identifying information required for legal representation. Because these records often contain detailed personal and financial data, a successful intrusion can affect both the firm and the individuals or businesses it represents.

What was likely exposed

The only data category named in the listing is internal files exfiltrated during the ransomware attack. The exact contents of those files have not been disclosed. Law firms in this practice area typically maintain client tax documents, bankruptcy schedules, correspondence, and related administrative records. Whether any of these specific categories were taken, and in what volume, has not been confirmed publicly.

Why it matters

Exposure of internal legal files can create downstream risks for clients whose financial and personal information appears in those records. Individuals may face increased chances of identity misuse or targeted fraud, while the firm itself may encounter regulatory scrutiny and operational disruption. Because the number of affected people and the precise data elements remain unknown, the full extent of potential harm cannot yet be measured.

Were you affected?

Individuals who have been clients of Richard J. Hackerman P.A. or who have corresponded with the firm should monitor their financial accounts and credit reports for unusual activity. They may also place fraud alerts with major credit bureaus and consider requesting copies of their tax transcripts directly from the Internal Revenue Service. Readers can run a free exposure scan of their email address against known breach data to determine whether their information has appeared in previously published listings.

AICompiled with AI assistance from public sources and published under our editorial standards.