Skip to content
Ransomware

Austin Plastic Surgery Institute listed on pear ransomware leak site

Austin Plastic Surgery Institute has been listed on the leak site of the ransomware group known as pear.

By
Siberpol Intelligence Unit
Published
2 min read
2 min read
  • Ransomware group: pear
  • Country: United States
  • Sector: Healthcare
  • Announcement date: August 20, 2026

Austin Plastic Surgery Institute targeted by pear ransomware group

The Austin Plastic Surgery Institute has been listed on the leak site associated with the ransomware group known as pear. According to an announcement made by the group, the healthcare provider has been targeted in a cyberattack that may put its digital assets and sensitive information at significant risk.

Claims of network intrusion and data theft

The pear group claims to have successfully obtained data belonging to the Austin Plastic Surgery Institute. In a post published on August 20, 2026, the group alleged that it had gained unauthorized access to the institution's networks. This claim follows an alleged attack date of August 18, 2026. The group has issued threats regarding the potential publication of the relevant data, which indicates that the institution's digital assets may be at risk of exposure.

Ransomware groups often employ a strategy known as double extortion. In these scenarios, attackers do not just encrypt an organization's files to disrupt operations; they also exfiltrate sensitive data. The threat of leaking this stolen information on a public leak site serves as additional leverage to pressure the victim into paying a ransom. While the specific ransom demand for this incident has not been disclosed, the presence of the organization on a leak site is a common indicator of such tactics.

Potential types of compromised information

Based on screenshots provided by the attackers, the group claims to have leaked a variety of sensitive documents. The information allegedly stolen includes a range of private records that could impact both the organization and its clients. The specific data types mentioned in the claim include:

  • Financial documents
  • Patient records
  • Employee information
  • Medical records
  • Patient data
  • Email correspondence

The breadth of this claimed data suggests a significant breach of privacy. When such a wide array of information is involved, the implications for the affected parties can be extensive and long-lasting.

Organization profile

Austin Plastic Surgery Institute is a healthcare center located in Austin, Texas. The facility provides a variety of medical services, specifically focusing on aesthetic and reconstructive surgery services.

Implications and industry risks

This incident may bring about the risk of exposing sensitive health data within the institution. For a US-based healthcare provider, such a breach can lead to serious consequences, including the initiation of legal processes and sanctions under HIPAA regulations. The leaked data could potentially lead to identity theft or targeted phishing attacks for both patients and employees.

Healthcare organizations are frequent targets for ransomware groups due to the high value of medical records and the critical nature of their operations. To defend against such threats, organizations in this sector often implement defensive steps such as multi-factor authentication, regular security awareness training for staff, and robust data encryption protocols. Maintaining offline backups and implementing strict network segmentation are also common strategies used to mitigate the impact of an intrusion.

At this time, information about the pear group remains limited in the public domain, and the group's future actions remain uncertain. The situation highlights the ongoing vulnerability of healthcare institutions to sophisticated cyber threats that aim to exploit sensitive personal and medical information.

Threat Intelligence

Track ransomware groups, victim posts and indicators of compromise, and see the records that match your own assets.

Related stories