Kinsmen TeleMiracle listed on pear ransomware leak site
Kinsmen TeleMiracle, a charitable organization, has been listed on the leak site of the threat group known as pear.
- Published
- 2 min read
- 2 min read
- Ransomware group: pear
- Country: Canada
- Sector: Retail & E-Commerce
- Announcement date: May 1, 2026
Kinsmen TeleMiracle listed on pear ransomware leak site
The threat group known as pear has listed the Canadian charitable organization Kinsmen TeleMiracle on its leak site. According to the announcement, which became visible on May 1, 2026, the group claims to have compromised various documents related to the organization's operations and employee information. The group asserts that the attack took place on April 9, 2026.
Details of the alleged data breach
The claim made by the pear group suggests that a significant amount of internal information has been accessed. While the specific volume of data and the total file count have not been disclosed by the group, the announcement indicates that the breach involves sensitive organizational and personnel records. The leak site listing includes screenshots that appear to show tables containing the names, phone numbers, and email addresses of the organization's staff. Furthermore, the group has provided samples of Excel files that appear to be financial or operational in nature.
The specific types of data mentioned in the claim include:
- Employee contact information
- Financial data
- Operational documents
Information regarding the specific motivations or the technical methods used by the pear group remains limited.
About Kinsmen TeleMiracle
Kinsmen TeleMiracle is a charitable organization based in Canada. The organization is known for hosting an annual telethon, which serves as a primary method to raise funds for the Kinsmen Foundation.
Potential impact and organizational risks
The alleged leak of this data may increase the risk of identity theft or targeted phishing attacks directed at the organization's employees and its donors. Because the organization operates within Canada, the breach may trigger regulatory review processes regarding data privacy under the Personal Information Protection and Electronic Documents Act (PIPEDA).
The nature of the shared data could potentially harm the organization's operational continuity and its overall reputation. Beyond the immediate impact on the organization itself, secondary risks include the potential exploitation of the leaked data by other threat actors and the exertion of pressure on the organization's supply chain. In many ransomware scenarios, threat actors employ a tactic known as double extortion, where they not only encrypt an organization's systems but also threaten to release sensitive data on public leak sites to increase pressure for ransom payments.
For organizations in the non-profit and charitable sector, maintaining robust cybersecurity posture is essential to protect donor trust and operational integrity. Common defensive steps for organizations facing such threats include implementing multi-factor authentication, maintaining regular offline backups, and conducting regular employee training to recognize phishing attempts. Additionally, ensuring compliance with regional data protection regulations is a critical component of managing the legal and reputational risks associated with data breaches.