Carient Heart & Vascular listed on pear ransomware leak site

• Ransomware group: pear
• Country: United States
• Sector: Healthcare
• Announcement date: July 15, 2026

Carient Heart & Vascular listed on pear ransomware leak site

Carient Heart & Vascular, a healthcare provider based in Northern Virginia, has been listed on the leak site of the ransomware group known as pear. The threat actor group has made claims regarding a breach of the organization's network and the subsequent theft of sensitive information.

Details of the claimed attack

The threat actor group pear announced on July 15, 2026, that it has listed data belonging to Carient Heart & Vascular on its leak site. According to the group's claims, access to the organization's network was obtained on June 23, 2026. The group alleges that it has exfiltrated a total of 2.5 GB of data from the target's systems.

Ransomware attacks often involve a tactic known as double extortion. In such scenarios, threat actors do not merely encrypt an organization's files to disrupt operations; they also focus on exfiltrating sensitive data. The goal of this method is to pressure the victim into paying a ransom by threatening to release the stolen information on public leak sites. While the specific ransom demand in this instance has not been disclosed, the listing of the organization on a leak site is a common step in this extortion process.

Alleged data exfiltration and contents

Based on the information provided by the group, the allegedly leaked data includes a variety of sensitive files. According to the screenshots provided by the threat actor, the stolen information is comprised of the following types of data:

• Patient records
• Medical reports
• Correspondence
• Billing information

The presence of such diverse data types highlights the high value that cybercriminals place on healthcare organizations. When medical and financial information is compromised, it creates a multifaceted risk for the victims involved. While the exact file count has not been specified, the total volume of the claimed data stands at 2.5 GB.

About Carient Heart & Vascular

Carient Heart & Vascular is a healthcare provider specializing in cardiology and vascular medicine in Northern Virginia. They offer diagnostic, treatment, and preventive care services for heart and vascular health.

Potential impact and sector risks

This incident may pose significant risks regarding the protection of sensitive data in the healthcare sector. Due to the potential breach of patient privacy, the organization could face legal sanctions under HIPAA regulations. There are several layers of risk associated with such a breach. For the patients, there is a possibility that they may be exposed to identity theft and targeted phishing attacks using the stolen medical and billing information.

Furthermore, the organization may experience reputational damage and disruptions to its operational processes. For healthcare entities, maintaining the integrity and availability of data is critical for patient safety and continuous care. A breach of this nature can undermine the trust patients place in their providers and create significant administrative burdens as the organization works to mitigate the fallout.

In the broader context of cybersecurity, healthcare remains a primary target for ransomware groups due to the sensitive nature of the data they hold. Organizations in this sector can take various defensive steps to mitigate these risks, such as implementing robust access controls, maintaining regular offline backups, and conducting continuous monitoring of their network environments. However, as seen in this case, even specialized providers face significant threats from groups like pear, a group for which information in the public domain remains limited.