ThinkBig Health Care Solutions listed on pear ransomware leak site

• Ransomware group: pear
• Country: United States
• Sector: Healthcare
• Announcement date: August 5, 2025

ThinkBig Health Care Solutions listed on pear ransomware leak site

The healthcare services provider ThinkBig Health Care Solutions has been listed on the leak site associated with the ransomware group known as pear. The group has claimed that the organization was subjected to a cyberattack, leading to a data breach that involves sensitive information related to the company's operations.

The claimed cyberattack and data leak

According to the announcement made by the pear group on August 5, 2025, the organization was targeted in a cyberattack that allegedly occurred on June 24, 2025. The group claims to have published data belonging to ThinkBig Health Care Solutions on its dedicated leak site as a result of this incident.

The attackers allege that they have successfully obtained data pertaining to the organization's administrative and medical processes. This type of activity is common in modern ransomware operations, often involving a strategy known as double extortion. In such scenarios, threat actors not only encrypt an organization's systems to disrupt operations but also exfiltrate sensitive data to pressure the victim into paying a ransom by threatening to release the information publicly.

Details of the alleged stolen data

The information provided by the group suggests that the leaked data includes various types of sensitive documentation. Based on screenshots released by the group, the following types of data are allegedly involved:

• Personal identification information
• Driver's license information
• Administrative and medical records

The group has shared samples of this data, which reportedly include Excel spreadsheets containing personal information presumably belonging to patients or employees. Additionally, the screenshots allegedly contain samples of Florida driver's licenses.

About ThinkBig Health Care Solutions

ThinkBig Health Care Solutions is a healthcare company that provides comprehensive services for medical practices. Their service portfolio includes contract acquisition, billing, collections, and practice management, making them a central entity in the administrative workflows of medical facilities.

Implications and industry considerations

The presence of highly sensitive personal information, such as driver's licenses, among the alleged leaked data may increase the risk of identity theft for the individuals affected by the breach. Because the organization operates within the healthcare sector, the breach may lead to legal and administrative sanctions under HIPAA regulations. This may require the organization to fulfill specific data breach notification obligations and inform all affected parties.

Furthermore, there is a possibility that this data could be utilized in secondary attacks or targeted phishing campaigns against the individuals involved. In the healthcare industry, where data is highly valuable on the dark web, such breaches often necessitate rigorous forensic investigations and enhanced security postures. Organizations in this sector typically focus on implementing robust access controls, encryption for data at rest and in transit, and continuous monitoring to mitigate these risks.

Publicly available information regarding the pear group remains limited. While the group has successfully claimed responsibility for this incident, their specific tactics, techniques, and procedures are not widely documented in the public domain.