Kirbor Homes listed on pear ransomware leak site

• Ransomware group: pear
• Country: United States
• Sector: Retail & E-Commerce
• Announcement date: June 18, 2026

US-based home builder Kirbor Homes listed by pear ransomware group

The threat actor known as pear has officially listed the organization Kirbor Homes on its dedicated leak platform. According to the announcement made on June 18, 2026, the group claims to have successfully compromised the organization's data. This development follows a pattern often seen in modern cyberattacks, where threat actors utilize leak sites to pressure victims through the threat of public data exposure.

Details of the claimed attack

The announcement provided by the pear ransomware group states that the alleged compromise of Kirbor Homes occurred on June 10, 2026. The group is currently managing the situation by threatening to publish the organization's data if their demands are not met. This tactic is a hallmark of double extortion, a method where attackers not only encrypt an organization's systems but also steal sensitive information to use as leverage for ransom payments.

In such scenarios, the threat actor uses the fear of reputational damage and regulatory scrutiny to coerce the victim. While the group has claimed responsibility for the breach, the specific details regarding the ransom demand have not been disclosed in the available information.

The scope of the alleged data leak

The leak site announcement includes a screenshot that purportedly shows the nature of the stolen information. The group claims that the breach involves approximately 1.5 GB of data. Based on the provided evidence, the compromised information is said to include various sensitive documents and communications. The specific types of data mentioned in the claim include:

• Financial documents
• Contracts
• Mortgage details
• Project drawings
• Email correspondence

The presence of such diverse data types suggests a significant breach of internal operations and client-facing documentation. The inclusion of mortgage details and financial documents is particularly concerning in a residential construction context, as these files often contain highly sensitive personal and financial information belonging to customers.

About Kirbor Homes

Kirbor Homes is a residential construction company that operates within the Mid-Atlantic region of the United States. The company's primary business model involves developing housing projects for customers located throughout the region.

Potential impact and organizational risks

This incident may pose a significant risk of exposing sensitive corporate and customer data within Kirbor Homes. The leaked financial information and contracts could lead to identity theft and fraud attempts against the organization's customers. Furthermore, the publication of such data could damage the organization's commercial reputation and risk supply chain security.

From a regulatory perspective, the organization may face notification obligations under US state laws and various data protection regulations depending on the nature of the exposed information. When sensitive customer data is involved, organizations typically face increased scrutiny regarding their data handling and protection protocols.

In the retail and e-commerce and construction sectors, maintaining the integrity of project drawings and contracts is vital for operational security. Organizations facing such threats often focus on strengthening their defensive posture through measures such as implementing multi-factor authentication, maintaining offline backups, and conducting regular security awareness training for employees to prevent initial access by threat actors.

Information regarding the pear ransomware group remains limited in the public domain, making it difficult to attribute the attack to a specific known entity or to predict their future tactics beyond the current claim.