Tostrud & Temp, S.C. listed in data leak announcement by pear

• Ransomware group: pear
• Country: United States
• Sector: Professional Services
• Announcement date: July 8, 2026

Tostrud & Temp, S.C. targeted in alleged data leak by pear

The threat group known as pear has published a data leak announcement on its leak site, claiming to have targeted Tostrud & Temp, S.C. The announcement, which appeared on July 8, 2026, suggests that the group has successfully exfiltrated a significant amount of information from the organization. While the group's specific methods and background remain limited in public records, the listing indicates a potential breach involving sensitive data belonging to the firm.

Details of the alleged claim

According to the announcement made by pear, the group claims to be in possession of 170 GB of data allegedly belonging to Tostrud & Temp, S.C. The group suggests that this information may be released publicly if their demands are not met, though no specific ransom demand was mentioned in the leak site posting. The group claims the attack occurred on June 23, 2026.

In many modern cyberattacks, threat actors employ a tactic known as double extortion. This method involves not only encrypting an organization's systems to disrupt operations but also stealing sensitive data to use as leverage. By threatening to leak the stolen information on a public leak site, attackers increase the pressure on the victim to pay a ransom, as the threat of a public data exposure can cause significant reputational and legal damage.

Alleged data types involved

Based on the information provided in the leak site announcement, the stolen data is said to include various types of sensitive information. The contents of the alleged leak include:

• Windows backups
• Personnel data
• Client information
• Correspondence

The presence of backups and correspondence suggests that the attackers may have gained access to internal communications and system recovery files, which can be highly valuable for further exploitation or identity theft.

About Tostrud & Temp, S.C.

Tostrud & Temp, S.C. is a full-service CPA firm based in La Crosse, Wisconsin. The firm provides a wide range of professional services, including accounting, tax, and consulting services, to both individual and corporate clients. Given the nature of their business, the firm handles a high volume of sensitive financial and personal information for its client base.

Potential impact and organizational risks

This alleged leak may pose significant risks of identity theft or fraud for the firm's clients and employees. Because Tostrud & Temp, S.C. operates as a CPA firm, if the leaked data includes financial and tax records, the institution may face challenges regarding compliance with US regulations and relevant state laws. The potential publication of this data could damage the firm's commercial reputation and create opportunities for secondary phishing attacks, where attackers use stolen information to craft highly convincing fraudulent messages.

For organizations operating in the professional services sector, such incidents highlight the importance of robust defensive measures. Common defensive steps include maintaining rigorous patch management to close vulnerabilities, implementing multi-factor authentication (MFA) across all access points, and conducting regular security awareness training for employees to recognize phishing attempts. Furthermore, maintaining offline, encrypted backups and implementing strict data loss prevention (DLP) protocols can help mitigate the impact of both data exfiltration and ransomware encryption.

Given the methods employed by groups like pear, caution may be required regarding the accuracy and scope of the data being claimed. It is not uncommon for threat actors to exaggerate the volume or sensitivity of stolen data to increase psychological pressure on the victim.