The PEAR ransomware group claims to have breached MCBS, LLC (MCBS), a United States-based firm that provides accounting and management services for healthcare providers. The group has listed MCBS on its data leak site, threatening to release a significant volume of sensitive information.
According to the actor, 3.3 TB of allegedly compromised data includes a wide range of sensitive information belonging to the firm, its clients, partners, and patients. The data reportedly includes:
- Firms’ and clients’ financials
- Human Resources (HR) records
- Business operations data
- Partners’ and vendors’ data
- Patient Personally Identifiable Information (PII)
- Patient Protected Health Information (PHI)
- Payment details
- Mailboxes and email correspondence
- Database and exports












