Skip to content
Ransomware

Next Level Solutions listed on pear ransomware leak site

Next Level Solutions, a provider of accounting, HR, and technology services, has been listed on the leak site of the ransomware group known as pear.

By
Siberpol Intelligence Unit
Published
3 min read
3 min read
  • Ransomware group: pear
  • Country: United States
  • Sector: Professional Services
  • Announcement date: September 14, 2025

Next Level Solutions targeted by pear ransomware group

Next Level Solutions, a professional services firm based in the United States, has been listed on the leak site of a ransomware group known as pear. The threat actor claims to have successfully breached the organization's network, leading to a significant data exfiltration event. This incident follows a common pattern in modern cyberattacks known as double extortion, where attackers not only encrypt systems but also steal sensitive information to use as leverage for extortion purposes.

According to the claims made by the pear group, the unauthorized access to the network occurred on September 9, 2025. The group subsequently posted the organization's details on their dedicated leak platform on September 14, 2025. While the group has threatened to release the stolen information publicly, information regarding the specific identity and background of the pear group remains limited.

Details of the alleged data exfiltration

The threat actor alleges that the breach resulted in the theft of approximately 10 GB of data. While the specific file count was not provided in the announcement, the listing indicates that the compromised information is quite diverse in nature. The group claims that the stolen data includes various sensitive categories that could impact the organization's operations and its relationships with external parties.

The data types allegedly exfiltrated by the attackers include:

  • Financial data
  • Operational documents
  • Partner information
  • Customer data

In many such ransomware scenarios, the publication of such data on a leak site is used to pressure the victim into paying a ransom. The presence of partner and customer information significantly increases the stakes of the breach, as it moves the impact beyond the organization's internal systems and into the sphere of its business ecosystem.

About Next Level Solutions

Next Level Solutions is a professional services firm located in the United States. The company provides a specialized suite of services designed to support other businesses, including accounting, human resources, and technology deployment services. Because the firm handles critical business functions such as financial management and personnel data, it operates within a high-stakes environment where data integrity and confidentiality are paramount.

Potential risks and organizational implications

Given that Next Level Solutions manages highly sensitive business processes, including accounting and human resources, this breach may pose significant secondary risks. These risks include the potential for identity theft or financial fraud targeting both the organization and its diverse client base. Furthermore, the threat actor's intent to publish the stolen data publicly could cause substantial damage to the organization's commercial reputation and may weaken the trust established with its business partners.

As a United States-based entity, the organization may face specific legal obligations. Depending on the nature of the data and the jurisdictions involved, the company may be subject to data breach notification requirements under relevant state laws and federal regulations. Additionally, there is a heightened risk that the leaked data could be utilized by malicious actors to launch targeted phishing attacks against the organization or its clients.

In such scenarios, it is generally considered important for organizations to conduct thorough reviews of their data security processes. Taking proactive steps to notify affected parties and strengthening defensive postures are common industry responses to mitigate the impact of such breaches. The complexity of these attacks highlights the ongoing need for robust cybersecurity frameworks to protect sensitive professional services data.

From the Professional plan

Phishing & Brand Protection

Monitor domains, phishing pages, ads and listings that impersonate your brand, and open takedown requests from the panel.

Related stories