A cyberattack attributed to the ransomware group PEAR has reportedly led to the exfiltration of approximately 1.4 TB of data from South Plains Rural Health Services, Inc. (SPRHS), a Texas nonprofit healthcare organization. The compromised data allegedly includes personal and medical information of thousands of patients, along with employee and administrative records. However, these claims have not been publicly confirmed by SPRHS.
PEAR notified SPRHS of the breach on June 17, and notifications to affected patients and HHS should have occurred by August 17, though no such notifications have been found on the Texas Attorney General’s breach site as of now.