Skip to content
Leak-site post naming Macfarlan Capital Partners, captured by ThreatCluster

Macfarlan Capital Partners

pear

Ransomware leak-site victim intelligence · EN

Data size
350 Gb
Posted
Oct 16, 2026
Country
USA
Industry
Finance, Real Estate

Summary

Written by ThreatClusterfrom file listing, victim profile, leak post, screenshot

Pear claims to have stolen 350 Gb of data from Macfarlan Capital Partners, a USA-based finance and real estate firm. The data categories claimed include financials, HR records, partners’ and vendors’ data, clients’ and investors’ private details, PII/PHI records, mailboxes and email correspondence, and databases. The leak post, which names Macfarlan Capital Partners as the victim, is listed on the group’s leak site.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Domains
macfarlan.com
Platforms
Tox OnionMail

What was taken

Equity real estate investment sponsor that serves institutional investors, family offices, wealth management advisors, and high net worth individuals

Data categories
FinancialsHRPartners’ & Vendors’ DataClients’ & Investors’ Private DetailsPII & PHI RecordsMailboxes & Email CorrespondenceDatabase

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

Site
macfarlan.com (https://www.macfarlan.com/)
Copyright
© 2025 - 2026 PEAR
Data Description
Financials, HR, Partners’ & Vendors’ Data, Clients’ & Investors’ Private Details, PII & PHI Records, Mailboxes & Email Correspondence, Database, etc.

Leak-site images (2)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
Logo of Macfarlan Capital Partners, featuring the name "MACFARLAN" in large text and "CP" in a stylized format.
onion leak page20 KB

Negotiation

Tox 457BB4E5DF0E650509322CA894758D925A568828090A3449D5AEEED30E9B8E18DDDFF71909ED