Fox Broermann Pediatric Dentistry of Tulsa listed on pear ransomware leak site

• Ransomware group: pear
• Country: United States
• Sector: Healthcare
• Announcement date: May 1, 2026

A data breach claim against Fox Broermann Pediatric Dentistry of Tulsa

The ransomware group known as pear has listed Fox Broermann Pediatric Dentistry of Tulsa on its leak site. According to the announcement made on May 1, 2026, the group claims to have successfully exfiltrated sensitive information belonging to the healthcare provider. This type of activity is characteristic of modern ransomware operations, where attackers often employ double extortion tactics. In these scenarios, threat actors do not merely encrypt an organization's systems to demand a ransom for decryption; they also steal sensitive data to threaten its public release unless the ransom is paid. By publishing portions of the stolen data on a dedicated leak site, these groups attempt to maximize pressure on the victim organization through reputational damage and legal exposure.

The alleged cyberattack and data exfiltration

The announcement by the pear group suggests that the institution was subjected to a cyberattack on April 22, 2026. While the specific methods used to gain access to the network remain unknown, the group claims to have successfully extracted a variety of sensitive documents. The group has already made portions of the stolen data public on their leak site to demonstrate the validity of their claims. No information was provided regarding the total size of the data stolen or the specific number of files involved. Furthermore, no ransom demand has been publicly disclosed by the group in relation to this specific incident.

The leaked information reportedly includes a range of highly sensitive personal and financial documents. Based on the evidence provided by the group, the following types of data are allegedly involved:

• Health savings account information
• Driver's license information
• Tax return documents
• Health insurance information

The presence of such diverse documentation, including IRS e-file signature authorization documents and health insurance cards, indicates a significant compromise of personal identifiable information (PII) and protected health information (PHI).

About Fox Broermann Pediatric Dentistry of Tulsa

Fox Broermann Pediatric Dentistry is a pediatric dental clinic located in Tulsa, Oklahoma, United States. The clinic provides specialized dental health services specifically tailored for children and adolescents.

Risks and implications for the healthcare sector

The data allegedly leaked in this incident may pose a high risk of identity theft and financial fraud for the institution's patients and employees. When sensitive documents such as driver's licenses and tax-related authorizations are exposed, the likelihood of affected individuals being subjected to targeted phishing attacks increases significantly. These attackers often use the stolen information to craft highly convincing messages designed to trick victims into revealing even more credentials or funds.

For healthcare providers, the exposure of such data can lead to serious consequences. In the United States, the exposure of healthcare data could lead to legal and administrative sanctions for the institution under HIPAA regulations. Such regulatory frameworks are designed to ensure the privacy and security of patient information, and failures to protect this data can result in significant oversight and penalties.

While public information regarding the pear group is limited, and their future actions or motivations remain uncertain, this incident highlights the ongoing threat to specialized medical practices. Organizations in this sector may need to initiate formal data breach notification processes and inform all affected parties to mitigate the impact of the leak. General defensive steps for organizations facing such threats typically include implementing robust multi-factor authentication, maintaining rigorous patch management schedules, and conducting regular employee training to recognize social engineering attempts.