LiveBreach Intelligence: data breaches, leaks & ransomware, tracked as they surfaceOngoing protection: GalaxyWarden →
Recent BreachesData breach tracker

Recent Breaches › Roger D. Mason II, P.A. Listed by pear Ransomware Group

HIGH severityUnverified claimHow we verify

Roger D. Mason II, P.A. Listed by pear Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

RBRecent Breaches Breach Intelligence·May 1, 2026
Roger D. Mason II, P.A. Listed by pear Ransomware Group

Occurred April 2026 · publicly disclosed May 1, 2026.

HIGH
Severity
May 1, 2026
Disclosed
ShareXLinkedInFacebookRedditWhatsAppTelegram

Roger D. Mason II, P.A. was listed by the pear ransomware group on May 01, 2026, after internal files were exfiltrated in a ransomware attack. Individuals who may have been affected should check for any notices from the organisation and take appropriate protective steps.

Severity & verification
HIGH severityUnverified claim
Data types not itemised.
Published on a ransomware group’s leak site — an unverified extortion claim until the named organization or credible reporting corroborates it.
Check your exposure
See every leak and listing tied to your email. We can’t confirm any single incident against the sources we search, so we won’t pretend to. 15-second check, no card, no account. Details go to your inbox.

By running your scan you agree to the Terms and Conditions and the Privacy Policy, and to GalaxyWarden emailing you the results of this scan.

Roger D. Mason II, P.A. appears on a listing published by the pear ransomware group. The entry states that internal files were taken during a ransomware attack on the Florida firm. No figure for the number of individuals affected has been released, and the organization has not issued a public statement confirming or disputing the listing.

What happened

The incident came to light on May 01, 2026, when the pear group added Roger D. Mason II, P.A. to its leak-site listing. The only detail supplied is that internal files were allegedly exfiltrated. No information has been made public about the date of the intrusion, the method of entry, the volume of data taken, or whether any files were later published.

Inside pear

Pear is a ransomware operation that has posted claims against multiple organizations over the past several years. Its pattern typically involves gaining access to corporate networks, copying files, and then demanding payment to prevent disclosure or to supply a decryption key. The group’s listings are presented on its own site and function as unverified assertions until corroborated by the named organization or by independent investigation.

Roger D. Mason II, P.A. and its sector

Roger D. Mason II, P.A. is a Florida law practice that handles matters involving auto dealership fraud. Law firms in this area routinely maintain client records, correspondence with financial institutions, investigative materials, and internal case files. A breach at such an office can expose information that clients provided under expectations of confidentiality.

What data was at risk

The listing refers only to “internal files.” No inventory of specific documents or data categories has been released. Organizations of this type commonly store client names, contact details, financial records related to vehicle purchases or loans, and communications with regulators or opposing parties. The precise contents of the exfiltrated material remain unconfirmed.

Why it matters

Individuals whose information appears in the firm’s files now face the possibility that those records could be used for identity theft, financial fraud, or targeted scams. For the firm itself, the incident raises questions about client trust and potential regulatory obligations under Florida and federal rules governing attorney-client information. Until the scope of the data is clarified, the practical impact on any one person cannot be measured.

What to do if you're exposed

Anyone who has been a client of Roger D. Mason II, P.A. should monitor their financial accounts and credit reports for unusual activity. Placing a fraud alert or credit freeze with the major bureaus can limit new-account fraud. Readers may also run a free exposure scan of their email address against known breach data sets to determine whether their information has appeared in other incidents.

AICompiled with AI assistance from public sources and published under our editorial standards.

Editorial & sourcing policy
Recent Breaches is a breach-monitoring service and news aggregator. We do not exfiltrate, host, purchase, or redistribute stolen data, and we do not hold the data claimed in leak-site listings. Incidents are compiled from publicly accessible sources and threat-intelligence platforms and are reported as claims attributed to their source. We promptly correct or remove material shown to be inaccurate — write to support@galaxywarden.com or press@recentbreaches.com.
Check if you’re exposed →

How this breach connects

Company

Attributed to

Method

CompanyRoger D. Mason II, P.A. security record
84/100
DoxxScan™ · Low doxx risk
B- 76Above-average record

1 reported incident on record.

See Roger D. Mason II, P.A.’s full breach history →

More recent breaches

Spector and Lenz, PC Listed by pear Ransomware GroupJune 30, 2026B & B Trading Listed by pear Ransomware GroupJune 18, 2026Plexsupply Inc Listed by pear Ransomware GroupMay 30, 2026Beyond Measure & Associates, Inc. Listed by pear Ransomware GroupMay 2, 2026

Latest breaches

Read GalaxyWarden’s full analysis of the Roger D. Mason II, P.A. Listed by pear Ransomware Group →

Source: threat-actor leak-site listing

Publicly posted by pear — unverified claim, pending independent verification

Breach listings — particularly those originating from ransomware or leak sites — are third-party claims that may be unverified, incomplete, or inaccurate. A listing does not by itself confirm that a breach occurred or that any specific data was exposed. Severity is an automated assessment, not a definitive rating. Verification status is shown where available.

Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. This information is aggregated from public sources for awareness only and is not legal, security, or investment advice.

ShareXLinkedInFacebookRedditWhatsAppTelegram