Palm Vascular Centers Ransomware Claim by pear (Nov 2026)

Claim Summary

On or around November 2, 2026, a ransomware group operating under the name “pear” purportedly added Palm Vascular Centers (palmvascular.com) to its dark web leak site. Palm Vascular Centers is a US-based healthcare organization that, according to the threat actor’s own listing, specializes in collaboration with interventional radiologists and vascular surgeons.

The group claims to have exfiltrated data from the organization. No data volume has been disclosed, and the listing provides only a brief, generic description of the victim’s business focus. According to the threat actor, the attack occurred on November 2, 2026. None of these details have been independently confirmed, and the listing itself offers little technical substantiation.

At the time of writing, there is no public confirmation from Palm Vascular Centers regarding a security incident, nor any statement addressing the claim.

Threat Actor Profile

The group behind this claim, pear, is effectively an unknown quantity in the ransomware ecosystem. Based on currently available intelligence:

• Track record: Unknown. There is no reliable count of prior victims attributed to this group.
• Known tools: No publicly documented tooling. It is unclear whether the group uses commodity ransomware builders, leaked variants, or custom malware.
• Tactics, techniques, and procedures (TTPs): No public research is available describing initial access vectors, lateral movement, or exfiltration methods.
• Research references: None identified in open sources at this time.

This absence of a documented history is itself a significant analytic gap. A group with no verifiable track record may be a genuinely new operation, a rebrand of an existing crew, or - in some cases - an actor making unsubstantiated claims to build notoriety. Analysts should treat the group’s credibility as unestablished until corroborating evidence emerges.

No YARA rules or detection signatures specific to this group are publicly available. Defenders should rely on generic ransomware detection guidance and behavioral analytics rather than actor-specific indicators.

Alleged Data Exposure

The leak site listing claims data was obtained from Palm Vascular Centers but provides no sample files, no data volume figure, and no stated deadline or ransom demand in the information available. The description of the victim appears to be drawn from public-facing marketing language rather than internal documents, which is common among leak site postings and does not by itself corroborate a breach.

Because no samples have been published, there is currently no way to assess the nature, sensitivity, or scope of any allegedly stolen data. Healthcare organizations typically hold protected health information (PHI), which would elevate the severity of any confirmed exposure - but that remains speculative here.

Potential Impact

If the claim is accurate, potential consequences could include:

• Exposure of patient and operational data, with associated HIPAA and state breach notification obligations.
• Operational disruption to vascular care services.
• Regulatory scrutiny and reputational harm.

However, ransomware groups routinely exaggerate or fabricate claims to pressure victims into payment. The lack of supporting evidence in this listing warrants skepticism.

What to Watch For

• Any official statement or breach notification from Palm Vascular Centers.
• Publication of data samples by the group, which would lend credibility to the claim.
• Regulatory filings or notifications to HHS or state authorities.
• Reuse of the “pear” branding by other listings, which may indicate a rebrand or affiliate activity.

Disclaimer

This report is based solely on an unverified claim posted to a ransomware group’s leak site. Nothing herein has been independently verified by Yazoul Security. The allegation may be inaccurate, exaggerated, or entirely false. No data samples, credentials, or access information are included. Organizations should await official confirmation before drawing conclusions.