Brookside Homes listed on pear ransomware leak site

• Ransomware group: pear
• Country: United States
• Sector: Retail & E-Commerce
• Announcement date: August 5, 2025

Threat actor pear claims data breach at Brookside Homes

The threat actor known as pear has listed Brookside Homes on its leak site, claiming to possess the company's data. This announcement, which appeared on the group's platform on August 5, 2025, indicates that the organization has been targeted in a cyberattack. While the listing serves as a public claim by the threat actor, the details provided suggest a significant breach of corporate information.

The pear group has listed Brookside Homes on its leak site, alleging that the company's data has been compromised. The announcement indicates that access to the company's network was allegedly obtained on June 24, 2025. This timeline suggests that the attackers may have maintained presence within the network for several weeks prior to the public announcement. The group may be attempting to exert pressure by threatening to publish or sell the exfiltrated data, a common tactic used in modern ransomware campaigns.

Data types involved in the alleged leak

The provided screenshots associated with the leak contain samples of various sensitive documents. Based on the information released by the threat actor, the following types of data are allegedly included in the breach:

• Financial records
• Customer contracts
• Architectural drawings
• Corporate correspondence

The presence of such diverse documentation suggests that the attackers may have gained access to multiple departments within the organization, ranging from finance and legal to design and administration.

About Brookside Homes

Brookside Homes is a custom home builder operating in Central Pennsylvania. The company provides high-quality custom home design and construction services to its clients. Given the nature of their business, the company handles significant amounts of sensitive client information, including architectural plans and legal contracts required for custom construction projects.

Analysis and potential impact

The alleged leak may pose secondary risks such as identity theft or fraud for the company's clients and employees. Because the stolen data includes customer contracts and financial records, the personal and professional information of individuals associated with the company may be at risk. Such incidents often require organizations to implement rigorous identity monitoring and fraud prevention measures for those affected.

Given that the company is based in the United States, legal proceedings under state-level data breach notification laws and relevant privacy regulations may be triggered. Organizations facing such incidents are often required by law to notify affected parties and regulatory bodies within specific timeframes. The nature of the leaked data, which includes architectural drawings and corporate correspondence, adds a layer of complexity to the potential impact on the company's intellectual property and operational security.

Information regarding the pear group is limited; therefore, no definitive conclusions can be drawn about the group's methods or motivations. In many ransomware scenarios, groups utilize a tactic known as double extortion, where they not only encrypt a victim's systems but also steal sensitive data to use as leverage during ransom negotiations. By threatening to release this data on a public leak site, the attackers aim to maximize the pressure on the victim organization to comply with their demands.

In response to such threats, organizations typically need to notify affected parties and review its security posture based on the nature of the leaked data. Defensive strategies often include enhancing network monitoring, implementing stricter access controls, and conducting thorough forensic investigations to understand the scope of the intrusion. As the situation evolves, the company may need to take further steps to secure its environment and mitigate the risks posed by the exfiltrated information.