A threat actor group known as m3rx claims to have stolen 82.5 GB of data, over 106,000 files, from Otero Geeza Law, P.A., a South Florida law firm. The firm has not publicly confirmed the breach. Potentially exposed data may include Social Security numbers, financial details, and legal records. Affected individuals should monitor credit reports and consider a credit freeze right away.
| Company | Otero Geeza Law, P.A. |
|---|---|
| Industry | Other Commercial |
| Data Types Exposed | Full Names and Contact Information, Social Security Numbers, Financial Account Details, Property Records, Litigation Records, Estate Planning Documents, Business and Corporate Records |
| People Affected | Not Publicly Disclosed |
| Attack Method | Data Extortion |
| Regulators Notified | Not Publicly Disclosed |
Were you affected by this breach?
You may be owed compensation.
Data breach victims can recover money for identity-theft losses, out-of-pocket costs, wasted time, and the ongoing risk of fraud — usually with no upfront cost, and no fee unless you win.
Check if you qualify — free reviewWhat Happened in the Otero Geeza Law Data Breach?
A threat actor group calling itself m3rx has claimed responsibility for a data theft incident involving Otero Geeza Law, P.A., a South Florida law firm that handles real estate, corporate, litigation, and estate planning matters. The group posted a listing claiming it stole 82.5 GB of data, spread across more than 106,000 files, from the firm’s systems.
As of now, Otero Geeza Law has not publicly confirmed this Otero Geeza Law data breach claim. The firm’s notification to individuals reportedly came in September 2026, though the exact date unauthorized access may have first occurred has not been publicly disclosed. Because the claim originates from the threat actor’s own leak-site posting, many specifics remain unverified by the company itself.
At this stage, there is no public statement describing how m3rx may have gained access to the firm’s network. As a result, the method of intrusion, whether through phishing, a compromised credential, or a software vulnerability, is not yet known. Readers should treat any details about scope or timeline as claims made by the attacker until the firm issues its own confirmation.
Who was affected?
Because Otero Geeza Law serves individuals and business clients across real estate, corporate, litigation, and estate planning matters, any confirmed breach could affect a wide range of people. This may include current clients, former clients, and possibly employees whose records were stored on firm systems.
The exact number of individuals affected has not been publicly disclosed. Given the firm’s practice areas, it is possible that both individual consumers and business entities are represented among those whose files were involved. Since estate planning and real estate matters often involve family members and beneficiaries, some affected individuals may not even be direct clients of the firm.
What Information Was Potentially Exposed?
Law firm files, especially those tied to real estate, litigation, and estate planning, routinely contain a broad mix of sensitive personal and financial details. Because the attacker claims to have taken over 106,000 files, the potential scope of exposed data could be significant.
- Full names and contact information
- Social Security numbers (commonly found in estate and litigation files)
- Financial account details tied to real estate transactions
- Property records and closing documents
- Legal case files and litigation records
- Estate planning documents, including wills and trusts
- Business formation and corporate records
If this information was indeed accessed, affected individuals could face a heightened risk of identity theft. For example, a stolen Social Security number combined with a name and address can allow criminals to open new credit accounts or file fraudulent tax returns.
In addition, exposed financial account details tied to real estate closings could enable targeted wire fraud schemes. Because litigation and estate files often include sensitive family and financial history, exposure of this data could also lead to blackmail attempts or highly personalized phishing scams.
What is the company doing?
Otero Geeza Law has not made a public statement confirming this incident or describing any specific investigation, remediation, or notification steps. Because the available information comes from the threat actor’s own claim, there is no confirmed detail yet about containment efforts or law enforcement involvement.
Until the firm releases its own account of what happened, affected individuals should rely on official communications directly from Otero Geeza Law rather than assuming any particular protective measure has been put in place. If the firm later confirms the breach, additional details about credit monitoring or other support may follow.
What Should Affected Individuals Do?
Monitor Your Credit Reports
Affected individuals should request a free copy of their credit report from each of the three major credit bureaus. Reviewing these reports carefully can help you spot new accounts or inquiries you did not authorize.
Because law firm data often includes SSNs and financial details, this step is especially important here. Set a recurring reminder to check your reports every few months, since fraudulent activity does not always appear right away.
Consider a Credit Freeze or Fraud Alert
If your Social Security number may have been part of this breach, placing a credit freeze with each bureau is one of the strongest protective steps available. A freeze blocks new creditors from accessing your file, which makes it much harder for identity thieves to open accounts in your name.
Alternatively, a fraud alert requires lenders to verify your identity before extending credit. This option is less restrictive than a freeze but still adds a meaningful layer of protection while you wait for more information about the breach.
Watch for Phishing and Scam Attempts
Because exposed data can include names, contact details, and case information, scammers may use these details to craft convincing phishing emails or phone calls. Be cautious of messages that reference specific legal matters or ask you to click a link or confirm personal information.
Instead of responding directly, verify any suspicious communication by contacting the firm or institution through a known, official phone number. This simple habit can prevent you from accidentally handing over sensitive information to a scammer impersonating a trusted source.
Protect Real Estate and Financial Transactions
If you completed a real estate transaction through this firm, contact your title company or lender directly to confirm the safety of any pending transfers. Wire fraud targeting real estate closings has become increasingly common, and exposed transaction details can make you a more likely target.
As a precaution, always verify wiring instructions by phone before sending funds. This is true even if an email appears to come from a trusted attorney or agent, since attackers often spoof legitimate email addresses.
Consult a Data Breach Attorney
If you believe your information was included in this incident, speaking with a data breach attorney can help you understand your rights. Many offer free consultations and can advise whether you may qualify for compensation.
Because this situation is still developing, an attorney can also help you track official updates and determine next steps as more facts become available. This is particularly useful if the firm later confirms the scope of the breach.
Get a Free Case Review
Tell us how this breach affected you. A data breach attorney will review your situation at no cost and with no obligation — it takes about two minutes.