Bromack Manufacturing listed on pear ransomware leak site

• Ransomware group: pear
• Country: United States
• Sector: Manufacturing
• Announcement date: August 5, 2025

The pear ransomware group claims a breach of Bromack Manufacturing

The threat group known as pear has published a listing on its leak site, alleging that it has successfully compromised the data of Bromack Manufacturing. This announcement, which appeared on August 5, 2025, serves as a claim of a successful cyberattack against the organization. While the group has released various documents as evidence to support their claims, the incident remains an allegation made by the threat actor.

According to the group's announcement, the cyber incident that led to this data leak is claimed to have occurred on June 27, 2025. This timeline suggests that the attackers may have had access to the organization's systems for several weeks before making the public announcement on their leak site. In many modern ransomware campaigns, threat actors utilize a technique known as double extortion, where they not only encrypt an organization's data but also steal sensitive information to use as leverage during negotiations.

Details of the alleged data leak

The pear group has provided several documents as evidence to support their claim of having breached the organization. The leaked information reportedly includes a variety of highly sensitive documents that could pose significant risks to the individuals involved. The nature of the data released suggests a focus on personal identification and legal documentation.

The specific types of data allegedly obtained by the group include:

• Passport data
• Social security numbers
• Personal identification information
• Contract documents

The release of such sensitive information is a common tactic used by ransomware groups to increase pressure on a victim organization. By exposing private details, attackers aim to cause maximum reputational and legal damage to the target.

About Bromack Manufacturing

Bromack Manufacturing is a specialized firm based in California. Founded in 1963 by Donald K. Polgrean, the company has a long-standing history in its industry. The firm specializes in the design and manufacturing of equipment tailored to the needs of financial institutions, specifically producing specialized fixtures and furnishings for the banking industry.

Potential risks and security implications

This incident suggests that employees and associated individuals may face significant risks of identity theft due to the nature of the leaked data. The exposure of social security numbers, passports, and personal identification information provides malicious actors with the necessary tools to impersonate individuals for fraudulent purposes.

Furthermore, the nature of the leaked data could lead to compliance issues under state-level data privacy laws and federal regulations in the United States. When sensitive personal information is compromised, organizations often face rigorous regulatory scrutiny and potential legal liabilities. The group responsible, pear, currently has limited public information available regarding their identity, leaving their specific motivations and operational capacity uncertain.

The organization may need to conduct a forensic investigation to determine the full scope of the leak and notify the affected individuals. Secondary risks associated with this type of breach include the potential use of leaked information in targeted phishing attacks and the potential compromise of supply chain security. Organizations in the manufacturing and specialized equipment sectors often serve as critical links in a larger supply chain, making the security of their data vital to the stability of their clients' operations. Defensive measures typically include implementing robust identity and access management, maintaining rigorous patch management schedules, and conducting regular security awareness training to mitigate the risk of initial access through social engineering.