US Graphite listed on pear ransomware leak site

• Ransomware group: pear
• Country: United States
• Sector: Manufacturing
• Announcement date: September 14, 2025

US Graphite targeted by pear ransomware group

US Graphite, a provider of carbon and graphite engineering solutions, has been listed on the leak site of the ransomware group known as pear. The group has claimed to have exfiltrated data belonging to the organization, marking a significant potential exposure of sensitive information.

Details of the alleged attack

According to the announcement made by the pear group on September 14, 2025, the group claims to have gained unauthorized access to the organization's network systems. The group asserts that this access was achieved on August 19, 2025. Following the initial intrusion, the group claims to have exfiltrated and subsequently exposed the organization's data on their public leak site.

Ransomware attacks of this nature often involve a tactic known as double extortion. In these scenarios, threat actors do not merely encrypt an organization's files to disrupt operations; they also steal sensitive data. The attackers then threaten to release this stolen information publicly unless a ransom is paid. This creates a dual pressure point for the victim: the immediate need to restore operational continuity and the long-term necessity of managing the reputational and legal fallout from a data leak.

Data involved in the leak

The information released or claimed to be stolen includes various types of sensitive documentation. Based on available screenshots, the data allegedly includes:

• Employee contact information
• Tax records
• Insurance application documents

The presence of such documents suggests that the breach extends beyond mere operational files to include highly sensitive personal and financial information. While the specific volume of data or the total file count has not been disclosed by the group, the nature of the documents identified indicates a significant breach of privacy.

About US Graphite

US Graphite is an American company specializing in carbon and graphite engineering solutions. The organization provides various graphite products and technical solutions designed for a wide range of industrial applications.

Risk assessment and industry implications

The allegedly leaked data contains personal information of employees and corporate financial documents, which may pose a high risk. This exposure could lead to identity theft or targeted phishing attacks against the affected individuals. Because the organization is based in the United States, the exposure of such sensitive documents may trigger legal processes under state-level data protection laws and federal regulations.

For organizations operating within the manufacturing sector, such incidents highlight the critical importance of robust cybersecurity frameworks. When sensitive employee and financial data are compromised, the impact can be felt across the entire business, affecting both operational continuity and corporate reputation. Organizations typically manage these risks by implementing multi-factor authentication, maintaining strict access controls, and conducting regular security audits to detect unauthorized network access before data exfiltration can occur.

Public information regarding the pear group remains limited, making it difficult to determine the full scope of their operations or their typical methods. However, the exposure of these sensitive documents remains a significant concern for the organization's stakeholders and the individuals whose data has been compromised.