Expert MRI listed on pear ransomware leak site

• Ransomware group: pear
• Country: United States
• Sector: Healthcare
• Announcement date: September 14, 2025

Healthcare provider Expert MRI targeted by pear ransomware group

The healthcare organization Expert MRI has been listed on a leak site by the threat actor group known as pear. The group claims to have successfully executed a cyberattack against the organization, resulting in a data breach that involves sensitive information.

Details of the alleged attack

According to the announcement posted on the pear leak site, the threat actor group alleges that they have gained unauthorized access to files containing both operational and patient information. The announcement was officially published on September 14, 2025, although the group cites the actual date of the attack as September 2, 2025. While the group has made these claims publicly, information regarding the specific identity and background of the pear group remains limited.

In modern cyberattack landscapes, ransomware groups often utilize leak sites to host stolen data as a method of public pressure. This tactic is frequently associated with double extortion, a strategy where attackers not only encrypt an organization's systems to disrupt operations but also steal sensitive data to threaten its public release. By threatening to leak information, attackers aim to increase the pressure on the victim to meet ransom demands.

Data types identified in the leak claim

The threat actor has provided evidence in the form of screenshots to support their claims of a successful breach. These images purportedly show various types of sensitive documentation belonging to the organization and its clients. The data types identified in the screenshots include:

• Driver's license information
• Patient registration forms
• Medical imaging reports
• Spreadsheet data

The presence of such diverse data types suggests a significant breach of privacy, as these files contain a mix of personally identifiable information and sensitive medical records.

About Expert MRI

Expert MRI is a medical imaging center located in the United States. The organization specializes in diagnostic imaging for various conditions, specifically focusing on brain, neck, and spine injuries, as well as orthopedic imaging. They utilize advanced imaging technologies to provide essential diagnostic services to their patients.

Impact assessment and industry implications

The claims made by the pear group pose significant risks to the organization's patient privacy and its established data security processes. Because the leaked data reportedly includes personally identifiable information and medical records, there is a heightened risk that affected individuals could be exposed to identity theft or targeted phishing attacks. Such attacks often leverage the stolen information to gain further access to victims or to conduct financial fraud.

Furthermore, the organization may face negative impacts regarding its supply chain and overall operational continuity. For healthcare entities operating within the United States, such incidents necessitate a thorough review of compliance processes under HIPAA regulations to ensure that patient data protections meet legal standards. Organizations in this sector can mitigate such risks by implementing robust encryption, maintaining strict access controls, and conducting regular audits of their data security frameworks to defend against the evolving tactics used by ransomware groups.