Brookside Homes Listed by pear Ransomware Group

On June 24, 2025, custom home builder Brookside Homes appeared on the leak site of the pear ransomware group. The company, which builds homes for families across Central Pennsylvania, is claimed to have had internal files exfiltrated during a ransomware attack. Public reporting indicates that customer and employee information may have been among the stolen data, though the exact number of people affected remains unknown.

Reported Details of the Breach

Available reporting describes the incident as a ransomware attack in which the attackers gained access to Brookside Homes’ internal systems, exfiltrated files, and later listed the company on their public leak site. The data exposed includes internal files that could contain names, addresses, contact details, financial records, or project information tied to clients and staff. No confirmed total of victim counts or specific data types beyond internal files has been released by the company or the group as of the leak date.

The listing appeared on the pear ransomware group’s dedicated leak page hosted on the dark web. Ransomware.live, a public tracker of such incidents, documented the posting on June 24, 2025.

Why This Matters for You and Your Family

When a home builder’s systems are breached, the people most exposed are often the families who trusted the company with personal information during the building or buying process. If you or anyone in your household has worked with Brookside Homes in Central Pennsylvania, your names, addresses, phone numbers, email addresses, and possibly financial details used for deposits or loans may now be in the hands of criminals.

Once stolen, this information rarely stays isolated. It can be sold, traded, or used to launch further attacks against you. For many families, the breach represents more than an inconvenience — it creates a direct pathway for identity theft, loan fraud, or targeted scams that feel personal because the attackers already know where you live.

The Doxxing and Identity-Chain Risks

Stolen internal files from a regional builder frequently contain enough personal details to link an individual’s real identity to online handles, family member names, and even children’s information. Attackers can combine this data with information from other breaches to build detailed profiles. A single address or phone number can connect gaming accounts, social media profiles, and family members, turning one leak into a chain of exposure.

Credential leaks like this one often cascade into account takeovers. If passwords or security questions were stored in the internal files, criminals may attempt to seize email accounts, banking logins, or your children’s gaming accounts. Gaming usernames tied to a family address are especially vulnerable because young players rarely use strong, unique credentials. The result is doxxing that can expose your home location, daily routines, and family relationships.

What to Do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, then use the cleanup to remove what you can.
• Rotate any password you ever used at Brookside Homes or related vendor sites, replace it with a unique one, and enable two-factor authentication through an authenticator app rather than text messages.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next time your information surfaces it is caught and addressed within hours instead of months.
• Cover the household with DoxxScan family coverage that extends protection to dependents and children’s gaming accounts that often chain back to the same home address or parent email.
• Let remediation specialists handle takedown requests across data brokers and exposed profiles while you focus on securing your own accounts.

The pear ransomware group first gained attention in public reporting around 2023. It has targeted organizations across multiple sectors, typically following a playbook of initial access through phishing or exploited vulnerabilities, followed by data exfiltration and extortion demands. Public reporting attributes to the group the practice of publishing samples of stolen data when victims do not pay, then offering the full archive for sale or further leak. In this case, the group listed Brookside Homes after the company apparently did not meet their demands.

Incidents like the Brookside Homes breach show that protection must move faster than the criminals. A short forward-looking step is to treat every vendor relationship as a potential data leak and close the gaps before attackers connect the dots. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping that reveals how your information links together, and hands-on remediation by specialists who manage takedowns for you. Its household coverage includes children’s gaming accounts that are often the weakest link in family doxxing chains.