JWiz listed on pear ransomware leak site

• Ransomware group: pear
• Country: United States
• Sector: Professional Services
• Announcement date: August 5, 2025

Professional services firm JWiz listed on pear leak site

The professional services firm JWiz has been listed on the leak site of the threat group known as pear. The announcement, made on August 5, 2025, claims that data belonging to the organization has been leaked following a cyberattack.

Details of the alleged attack

According to the post created by the threat group pear, the group obtained access to the JWiz network on July 24, 2025. The group has attempted to support its claims by sharing various documents related to the organization's operations as samples to prove the validity of the breach.

Information regarding the pear group remains limited in the public domain. In many modern cyberattacks, threat actors utilize leak sites to host stolen data as a method of double extortion. In such scenarios, attackers not only encrypt an organization's systems but also threaten to release sensitive information publicly to exert maximum pressure on the victim to meet ransom demands. While the specific ransom demand for this incident has not been disclosed, the public exposure of data is a hallmark of this tactic.

Data samples and affected information

The threat group has shared specific samples to substantiate its claims of a successful breach. These samples include sensitive documents such as invoices, passport copies, personal application forms, and various administrative documents. The nature of these files suggests a significant exposure of sensitive information.

The following types of data are reportedly involved in the leak:

• Financial documents
• Passport information
• Personally Identifiable Information (PII)
• Administrative documents

The specific volume of data stolen and the total count of files involved have not been disclosed by the threat group.

About JWiz

JWiz is a company that provides marketing solutions for small and local businesses. Their service portfolio includes online advertising, sales promotion, and lead generation. Additionally, the firm handles social media management, website design, development, hosting, and search engine optimization.

Risk assessment and implications

The alleged leak may pose a significant risk of identity theft for both the organization's employees and its clients. Given the high sensitivity of the shared documents, such as passports and personal application forms, the organization may face notification obligations under state-level data protection regulations in the United States.

Secondary risks resulting from this incident may include the use of the leaked data in targeted phishing attacks or the compromise of supply chain security. As the organization operates within the professional services sector, this incident could lead to a loss of client trust and damage the company's commercial reputation. The group's methods appear intended to exert pressure by publicly exposing the data.

In general, organizations facing such threats often focus on defensive measures such as implementing multi-factor authentication, maintaining robust backup strategies, and conducting regular security awareness training to mitigate the risk of initial access. For firms in the professional services sector, maintaining strict data governance and monitoring for unauthorized access are critical components of a defensive posture.