Adobe Insurance Brokers, LLC listed on pear ransomware leak site

• Ransomware group: pear
• Country: United States
• Sector: Financial Services
• Announcement date: October 21, 2026

Adobe Insurance Brokers, LLC targeted by pear ransomware group

Adobe Insurance Brokers, LLC, an independent insurance agency based in California, has been listed on the leak site of the pear ransomware group. The threat actor, known as pear, has published an announcement alleging a data breach involving the institution. Through this listing, the group claims to have successfully obtained the organization's data and has issued threats to publish the information publicly.

Details of the alleged data breach

The announcement made by the pear ransomware group identifies the victim as a financial services firm located in Morgan Hill, California. According to the claims made by the threat actor, the compromised data is not limited to a single category but encompasses a variety of sensitive corporate and personal information. The group asserts that they have gained access to several types of documentation that could be highly sensitive to the organization and its stakeholders.

The specific types of data mentioned in the group's announcement include:

• Contracts
• Personal data
• Financial files
• Email correspondence

The group has not provided information regarding the total size of the data stolen or the specific number of files involved. Furthermore, no specific ransom demand has been disclosed in the public announcement, and the exact date the initial intrusion occurred remains unconfirmed by the source, though the listing appeared on October 21, 2026.

About Adobe Insurance Brokers, LLC

Adobe Insurance Brokers, LLC is an independent insurance agency that operates out of Morgan Hill, California. As a firm within the financial services sector, the organization provides a range of insurance solutions designed for both personal and commercial clients. This role as a provider of insurance solutions necessitates the handling of various sensitive documents and client information.

Risk assessment and industry implications

This incident may present a significant risk of exposing sensitive information belonging to the institution's clients and employees. Given that the organization is a US-based entity, a potential data breach of this nature could lead to various legal repercussions under both state laws and federal regulations. The exposure of such data carries inherent risks, as the stolen information might be utilized by malicious actors for identity theft or for conducting targeted phishing attacks against the organization or its clients.

While public information regarding the pear ransomware group remains limited, it is important to consider the common tactics used by such entities. Ransomware groups often employ double extortion tactics, a method where they not only encrypt an organization's data to disrupt operations but also steal sensitive information to use as leverage. By threatening to leak the data, the attackers exert significant pressure on the institution's operational continuity and reputation.

In the financial services sector, organizations typically face heightened scrutiny regarding data protection. To mitigate the risks associated with such threats, companies in this sector often implement various defensive measures. These include robust encryption for data at rest and in transit, multi-factor authentication to secure access to sensitive systems, and continuous monitoring of network traffic to detect unauthorized access. Additionally, maintaining regular, offline backups and conducting comprehensive employee training on phishing awareness are standard practices used to defend against the types of data exfiltration and extortion claimed in this incident.