Pear Ransomware — Victims, Campaigns & Activity

Threat entity extracted from intelligence sources

Frequency
6
occurrences
First Seen
December 8, 2025
Last Seen
July 6, 2026

Pear is a ransomware_group tracked by ThreatCluster, appearing in 5 threat clusters built from 6 intelligence report mentions.

Pear is a ransomware_group tracked across 5 threat clusters and 6 intelligence report mentions on ThreatCluster. First observed December 8, 2025; most recent activity July 6, 2026.

Related Threat Clusters

Recent Intelligence Reports

  • Over 300000 affected as MCBS reveals sensitive data was compromised — Teiss · July 6, 2026
  • Optimum First Mortgage Data Breach: Edelson Lechtzin LLP Launches Investigation Into ... — Prnewswire · June 23, 2026
  • Tracker — www.globenewswire.com · June 11, 2026
  • Monmouth University Data Breach Reported; Attorneys Investigating — Classaction · March 27, 2026
  • Ransomware group claims it stole data from Monmouth University — Edscoop · March 26, 2026
  • Tri-Century Eye Care Data Breach Impacts 200,000 Individuals — Feeds.Feedburner · December 8, 2025

Frequently asked questions

What is Pear?

Pear is a ransomware_group tracked by ThreatCluster, appearing in 5 threat clusters built from 6 intelligence report mentions.

Is Pear still active?

The most recent intelligence report mentioning Pear on ThreatCluster is dated July 6, 2026. Activity was first observed December 8, 2025, giving a tracked span from then to July 6, 2026.

What is Pear associated with?

Across ThreatCluster reporting, Pear most frequently co-occurs with Data Breach, DDoS, Ransomware, Sql Injection, C&C MD PC, among 12 tracked related entities.

What are the latest developments involving Pear?

The most significant recent cluster is “Monmouth University Hit by PEAR Ransomware Attack, 16TB of Data Compromised” (2 articles · Updated March 27, 2026). Pear appears across 5 threat clusters in total, listed above with sources.

How much reporting does ThreatCluster have on Pear?

Pear appears in 6 intelligence report mentions across 5 deduplicated threat clusters, aggregated from 17,000+ monitored sources.

CVSS v3.1 Breakdown