Law Office of Ronald W. Hillberg Listed by pear Ransomware Group

On November 12, 2025, the Law Office of Ronald W. Hillberg appeared on the leak site of the pear ransomware group. Clients whose estate planning documents, wills, and other internal files were handled by the firm now face the risk that their sensitive personal information has been stolen and may be published or sold.

What's Publicly Reported from Reporting

Public reporting indicates the firm was listed on the pear ransomware group’s leak site on November 12, 2025. The data taken includes internal files described as estate planning and wills. The exact number of individuals affected remains unknown, and it is not yet clear whether the attackers have begun publishing any of the stolen documents. The breach occurred through a ransomware attack in which the group exfiltrated data before threatening to release it.

Why This Matters for You and Your Family

If you or anyone in your family worked with the Law Office of Ronald W. Hillberg on wills, trusts, powers of attorney, or any estate planning matters, your private financial details, family relationships, Social Security numbers, and home addresses may now be in the hands of criminals. This kind of information is valuable because it can be used to file fraudulent tax returns, open accounts in your name, or pressure you with threats of embarrassment. Even if you are not the primary client, documents often contain information about spouses, children, and other relatives. Once data leaves a law firm’s control, you cannot assume it will stay private.

The Doxxing and Identity-Chain Implications

Stolen estate-planning files frequently contain multiple pieces of identifying information about the same household: names, dates of birth, addresses, phone numbers, email accounts, and sometimes copies of driver’s licenses or tax returns. Attackers can link these records to usernames used on social media, shopping sites, or gaming platforms. A single leak can therefore become the starting point for a doxxing chain that reveals far more than the original documents. Credential leaks of this nature often cascade into account takeovers, especially for gaming accounts belonging to you or your children, where the same email or password may have been reused. The result can be identity theft, harassment, or demands for payment to prevent further exposure.

What to Do

• Run a DoxxScan to map every link between your emails, phone numbers, handles, and real-world identity so you can see exactly what exposure looks like from this incident.
• Rotate any password you ever used at the Law Office of Ronald W. Hillberg or on any site sharing the same email address, then enable two-factor authentication through an authenticator app rather than text messages.
• Enable continuous DoxxScan monitoring across 13.1 billion+ breach records and more than 100 platforms so the next time one of your details surfaces you learn about it within hours instead of months.
• Cover the entire household with DoxxScan family protection that extends to dependents and children’s gaming accounts, which often become targets when parent data is leaked.
• Let remediation specialists handle takedown requests and notifications on your behalf while you focus on securing accounts and talking with affected family members.

The incident shows how quickly professional services that hold your most private documents can become gateways to identity theft and harassment. A short period of decisive action now can limit the damage and reduce the chance that criminals turn your family’s estate plans into leverage. DoxxScan by GalaxyWarden provides continuous monitoring across 13.1B+ breach records and 100+ platforms, AI-powered identity-chain mapping that connects online handles to real identities, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts.