Skip to content
Leak-site post naming gWorks, captured by ThreatCluster

gWorks

pear

Ransomware leak-site victim intelligence · EN

Data size
1.1 Tb
Posted
Nov 4, 2026
Country
USA
Industry
Enterprise Resource Planning (ERP)

Summary

Written by ThreatClusterfrom file listing, victim profile, leak post, screenshot

pear’s leak claims 1.1 TB of data were stolen from gWorks. The data categories claimed include partners’ and vendors’ data, clients’ and customers’ private data, internal and external email correspondence, and database exports. The leak page identifies the victim as gWorks (gworks.com), described as a USA-based ERP company. Publication status on the leak site is listed.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Domains
gworks.com

What was taken

A technology company specializing in software solutions designed to help small towns and rural areas make effective use of software and technology

Data categories
Partners' & Vendors' DataClients' & Customers' Private DataInternal & External Email CorrespondenceDatabase Exports
Leak site tags
ERP

Leak-site images (1)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture

Negotiation

Tox 457BB4E5DF0E650509322CA894758D925A568828090A3449D5AEEED30E9B8E18DDDFF71909ED