Preferred Homes Realty listed on pear ransomware leak site

• Ransomware group: pear
• Country: United States
• Sector: Retail & E-Commerce
• Announcement date: August 5, 2025

Preferred Homes Realty targeted by pear ransomware group

Preferred Homes Realty has been listed on a leak site associated with the threat group known as pear. The threat actor claims that the organization's data has been compromised through a targeted cyberattack. This announcement, made on August 5, 2025, suggests that the group has gained unauthorized access to the company's internal systems and has exfiltrated various documents.

Details of the alleged breach

According to the claims made by the pear ransomware group, the attackers successfully obtained access to the organization's network. Following this unauthorized access, the group alleges that they were able to exfiltrate various documents from the company's environment. While the group has published these claims on their leak site, public information regarding the specific methods, tools, or identity of the pear group remains limited in the public domain.

The breach follows a timeline where the claimed attack date is noted as July 9, 2025. Ransomware groups often utilize a double extortion tactic, where they not only encrypt an organization's data to disrupt operations but also steal sensitive information to use as leverage for ransom demands. By threatening to leak stolen data on public forums or leak sites, these actors increase the pressure on the victim to comply with their demands to avoid reputational damage or regulatory scrutiny.

Data types involved in the leak

The screenshots provided by the threat actor indicate that the stolen information includes a variety of sensitive materials. The data allegedly exfiltrated from Preferred Homes Realty consists of:

• Official state documents
• Notarized forms
• Personal data

The presence of such documents suggests that the breach may have implications for the privacy of individuals involved in real estate transactions. No specific information was provided regarding the total volume of data stolen or the specific number of files compromised.

About Preferred Homes Realty

Preferred Homes Realty is a real estate brokerage firm that provides residential buying and selling services. The company operates within the Fox Valley area of Illinois, offering resources and guidance to clients regarding the real estate market in Elgin and the surrounding towns.

Potential impact and security implications

The exfiltrated data, if verified, may significantly increase the risk of identity theft for the organization's customers and employees. Because the stolen information includes official state documents and notarized forms, the sensitivity of the breach is heightened. Furthermore, since the organization operates within the United States, the incident may trigger state-level data protection laws and specific notification requirements for the affected parties.

There is a significant possibility that threat actors could utilize this stolen information in secondary attacks. Such data is often used in highly targeted phishing campaigns, where attackers use specific personal details to gain the trust of victims. This type of social engineering can lead to further compromises within the organization or its client base.

In response to such incidents, organizations typically undergo a forensic investigation to determine the full scope of the breach and identify exactly which parties were affected. To mitigate the risks associated with data exfiltration, it is common for organizations to implement robust defensive measures, such as multi-factor authentication, network segmentation, and continuous monitoring of data egress to detect unauthorized transfers of sensitive files.