Kellys Home Center listed on pear ransomware leak site

• Ransomware group: pear
• Country: United States
• Sector: Retail & E-Commerce
• Announcement date: September 28, 2026

The ransomware group known as pear has listed Kellys Home Center on its leak site, claiming to have obtained data belonging to the organization. This announcement, which serves as a claim of a successful cyberattack, was published on September 28, 2026. The group has cited the date of the attack as September 24, 2026. At this time, public information regarding the specific details and operations of the pear group remains limited.

The details of the alleged attack

According to the information provided by the threat actor, the pear group has successfully targeted Kellys Home Center. The group's listing on their leak site is a common tactic used in modern cyberattacks, often associated with double extortion strategies. In such scenarios, attackers not only encrypt an organization's systems to disrupt operations but also steal sensitive information to pressure the victim into paying a ransom by threatening to release the data publicly.

The announcement was made several days after the claimed date of the initial intrusion. While the group has claimed responsibility for the breach, the specific methods used to gain access to the network have not been detailed in the public announcement. Information regarding the total volume of data stolen, the specific number of files compromised, or the specific ransom demand made by the attackers has not been provided in the source material.

Alleged data types involved in the leak

Based on the information available from the leak site screenshot, the data allegedly exfiltrated by the pear group includes various types of sensitive corporate and administrative information. The leaked files are said to encompass several critical categories of data that are vital to the internal operations of a retail business.

• Financial documents
• HR records
• Contracts
• Hardware information

The presence of such diverse data types suggests that the attackers may have gained access to multiple internal systems or directories within the organization's network infrastructure.

About Kellys Home Center

Kellys Home Center is a retail company based in the United States. The organization specializes in the sale of home appliances, mattresses, and furniture, operating within the home goods sector. As a retail and e-commerce entity, the company manages a variety of business processes that involve significant amounts of corporate and potentially personal data.

Potential impact and organizational risks

This alleged data leak may pose a significant risk of exposure for the personal data of Kellys Home Center's employees and customers. Because the organization is based in the United States, a potential data breach could lead to complex legal consequences under various state-level privacy laws and federal regulations. The exposure of such information often triggers mandatory notification requirements to regulators and affected individuals.

Furthermore, the specific types of data mentioned—such as HR records and financial documents—could be utilized by malicious actors for identity theft or highly targeted phishing attacks against the organization or its stakeholders. Such attacks often leverage the stolen information to gain further access or to conduct financial fraud.

Beyond the immediate privacy concerns, the leakage of corporate data can create negative impacts on the supply chain and lead to significant reputational damage for the organization. In the retail and e-commerce sector, maintaining customer trust is essential, and a breach of this nature can undermine that trust. Organizations in this sector can mitigate these risks by implementing robust security frameworks, maintaining strict access controls, and ensuring comprehensive monitoring of their digital environments to detect unauthorized data movement.