Pear

☆ pin

Also known as PEAR, Pure Extraction and Ransom

Reports

First seen

May 20, 2026

Last seen

Jul 30, 2026

Motivation

Financial

Targeting

Sectors

Healthcare ×4 Manufacturing ×4 Energy & Utilities ×2 Financial Services ×1 Transport & Logistics ×1 Retail & E-commerce ×1 Other ×1 Agriculture ×1

Victim regions

×1

×10

United States×10

Singapore×1

Victim country, only when stated. Corpus is predominantly English-language reporting, so US/EU coverage is overweighted relative to true victim distribution.

Top ATT&CK techniques

T1041 Exfiltration Over C2 Channel ×1T1565.001 Data Destruction ×1

Indicators

domain ×24hash_sha1 ×1

Indicator values are available on Pro and via the API.

Recent reports

High

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Targeting

Top ATT&CK techniques

Indicators

Recent reports

Pear ransomware claims Sonitor Technologies victim

Data breach at medical billing firm MCBS affects 1.26 million people

Pear ransomware gang publishes Metropolitan Construction Systems as victim

Pear Ransomware Claims Carient Heart & Vascular as Victim

Pear ransomware gang claims breach of South Plains Rural Health Services

Pear ransomware gang claims Faro Products Inc. victim

Pear ransomware gang publishes Tostrud & Temp, S.C. as victim

Pear ransomware gang publishes AC Beverage, Inc. as victim

Pear ransomware gang publishes CNW Electronics Pte Ltd as new victim

Pear ransomware publishes Spector and Lenz, PC as victim

Pear ransomware claims ORA Group Information as victim

Pear ransomware gang publishes Sociedad Latina victim

Pear ransomware claims Optimum First Mortgage victim

Pear ransomware claims B & B Trading victim

Pear ransomware claims Release Marine, Inc. as victim

Pear ransomware gang publishes Kirbor Homes as victim

Pear ransomware gang claims K & E Distributing victim

Pear ransomware publishes Bayou Electrical Services as victim

Pear ransomware gang claims National Health Fund victim

Pear ransomware claims Alpha IT as victim

Pear ransomware claims Plexsupply Inc victim

Pear ransomware gang publishes Pro Farm Group Inc as victim

Pear ransomware publishes Fana Jewelry Inc as victim

Pear ransomware gang claims Indian Creek Valley Water Authority victim

Pear ransomware gang publishes Exchange Group as victim