Atlantic National Trust Listed by pear Ransomware Group

On January 26, 2026, Atlantic National Trust appeared on the leak site of the pear ransomware group. The company, which provides commercial asset-backed loans, real estate acquisition financing, secured lending, development, and property management services, is claimed to have had internal files exfiltrated during a ransomware attack. While the exact number of people affected remains unknown, anyone whose personal or financial records passed through the firm—including borrowers, business partners, and employees—may now have sensitive data exposed.

What's Publicly Reported from Reporting

Public reporting indicates that pear actors listed Atlantic National Trust on their dark-web leak portal and began publishing samples of stolen data. The exposed material consists of internal files obtained after the ransomware deployment. No confirmed total of impacted individuals has been released, and the precise date of initial compromise has not been disclosed. The leak site posting on January 26, 2026, serves as the first public confirmation that negotiations between the attackers and the company either failed or never occurred.

Available reporting describes the data as documents tied to commercial lending and real-estate transactions. Such records frequently contain names, addresses, Social Security numbers, tax returns, bank account details, and loan application information—material that can be repurposed for identity theft, fraud, or targeted phishing.

Why This Matters for You and Your Family

If you or any member of your family has done business with Atlantic National Trust—whether as a borrower, investor, vendor, or employee—your personal information could be in the hands of criminals. A single exposed loan file can contain enough detail to open new accounts in your name, file fraudulent tax returns, or impersonate you to lenders. When that information reaches data brokers or underground markets, it rarely stays isolated. One breach can quietly feed dozens of future attacks against you and your household for years.

Credential leaks from financial services often cascade into gaming platforms, email accounts, and social media. Children’s usernames and passwords reused from family devices become entry points for doxxing or account takeovers that expose home addresses, phone numbers, and photos. Ordinary families end up dealing with the long-term consequences even though they never directly chose this lender.

The Doxxing and Identity-Chain Implications

Ransomware groups like pear do not limit themselves to encryption and ransom demands. Once they obtain internal files, they map relationships between names, emails, phone numbers, and associated online handles. This identity-chain process lets them target not only the primary victim but also spouses, children, and extended family members. A single leaked business record can reveal household addresses, children’s schools, and even gaming account details if family members used company-linked emails for registration.

These chains accelerate doxxing campaigns. Attackers combine the fresh data with information already circulating on breach forums, creating detailed profiles that enable harassment, SIM-swapping, or extortion. Public reporting shows that victims of such chained attacks frequently face repeated incidents long after the original breach fades from headlines.

What to Do

• Run a DoxxScan to map every link between your emails, phone numbers, usernames, and real-world identity so you can see exactly what this claimed breach has exposed.
• Rotate any password you used at Atlantic National Trust or any related financial service, then enable two-factor authentication through an authenticator app rather than text messages.
• Enable continuous DoxxScan monitoring across 13.1 billion+ breach records and more than 100 platforms so the next leak that touches your family is caught within hours instead of months.
• Cover the entire household with DoxxScan family protection, which includes children’s gaming accounts that often chain back to the same addresses and emails exposed in financial breaches.
• Let remediation specialists handle takedown requests across data brokers and leak sites while you focus on securing your own accounts and alerting family members.

The incident underscores a simple reality: data stolen in 2026 can be exploited in 2030. Staying ahead requires more than one-time checks. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1B+ breach records and 100+ platforms, AI-powered identity-chain mapping that connects scattered handles to real identities, hands-on remediation by specialists, and full household coverage that extends to children’s gaming accounts. Families who treat credential leaks as ongoing threats rather than single events give themselves the best chance of staying ahead of the next wave.