Skip to content
Leak-site post naming Indroj Medical Group Inc., captured by ThreatCluster

Indroj Medical Group Inc.

pear

Ransomware leak-site victim intelligence · EN

Data size
416 Gb
Posted
Sep 24, 2026
Country
USA
Industry
Medical Practices

Summary

Written by ThreatClusterfrom file listing, victim profile, leak post, screenshot

Pear claims 416 GB of data from Indroj Medical Group Inc. were taken and posted on the group's leak site. They state the stolen data covers financials, HR, partner and vendor records, provider data, patients’ private data, PII and PHI, email correspondence, and database exports. The leak post is published and identifies Indroj Medical Group Inc. as the victim.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

What was taken

The Web's Free NPI Registry Search & Provider Reference Site

Data categories
FinancialsHRPartners' & Vendors' DataProviders' DataPatients' Private DataPII & PHI RecordsEmail CorrespondenceDatabase Exports

Leak-site images (2)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
Logo featuring the text "NPI PROFILE" with a stethoscope graphic integrated into the design.
onion leak page30 KB

Negotiation

Tox 457BB4E5DF0E650509322CA894758D925A568828090A3449D5AEEED30E9B8E18DDDFF71909ED