Family Psychological Associates listed on pear ransomware leak site

• Ransomware group: pear
• Country: United States
• Sector: Healthcare
• Announcement date: April 9, 2026

Mental health provider targeted by pear ransomware group

The ransomware group known as pear has published a leak announcement claiming to have obtained data belonging to Family Psychological Associates. The listing, which was discovered on April 9, 2026, indicates that the group claims to have conducted an attack against the organization on April 6, 2026. This announcement follows a common pattern seen in modern cyberattacks where threat actors use dedicated leak sites to pressure victims by threatening to release sensitive information.

In many such scenarios, ransomware groups employ a tactic known as double extortion. In this model, attackers do not merely encrypt an organization's systems to disrupt operations; they also exfiltrate sensitive data before the encryption occurs. The threat of releasing this stolen information on a public leak site serves as additional leverage to demand a ransom. While the specific details regarding the ransom demand and the total volume of data stolen remain unknown, the mere presence of an organization on a leak site signifies a significant security incident.

Claims regarding the data breach

The announcement made by the pear group includes specific details regarding the institution's operations and the data that has allegedly been exfiltrated. According to the claims made by the threat actors, the breach involves a variety of sensitive documents that could impact both the organization and the individuals it serves. The group asserts that the following types of information have been compromised:

• Financial documents
• Patient records
• Employee information
• Identity data

The presence of such diverse data types—ranging from internal corporate documents to highly sensitive personal information—highlights the potential breadth of the intrusion. The group has not provided information regarding the total file count or the specific size of the data exfiltrated during the incident.

About Family Psychological Associates

Family Psychological Associates is a Pennsylvania-based provider of psychological counseling and mental health services. The organization offers a variety of therapy and assessment services tailored to meet the needs of children, adolescents, and adults. Given its role in providing mental health services, the organization handles highly sensitive information regarding the well-being and personal lives of its clients.

Potential impacts and sector-specific risks

The claims made by the pear group may create negative impacts on the institution's patient privacy and data security processes. Because the organization operates within the healthcare sector, the leaked data may need to be evaluated under HIPAA regulations. Such regulatory frameworks are designed to ensure the protection of sensitive patient health information, and a breach of this nature often triggers complex legal and compliance requirements.

The disclosure of the alleged data could bring about secondary risks for both patients and employees. These risks include the possibility of identity theft or the execution of targeted phishing attacks, where attackers use stolen personal details to gain further access to systems or to defraud individuals. Furthermore, the organization may experience significant disruptions in its operational processes and could face the possibility of legal sanctions resulting from the incident.

For organizations operating in the healthcare sector, maintaining robust defensive measures is critical. This typically involves implementing strong access controls, continuous monitoring of network traffic, and regular security awareness training for staff to prevent phishing. However, public information regarding the specific methods and capabilities of the pear group remains limited in the public domain.