Family Psychological Associates Listed by pear Ransomware Group

On April 6, 2026, the pear Ransomware Group added Family Psychological Associates to its public leak site, claiming that internal files had been exfiltrated from the mental health provider during a ransomware attack. Patients and their families whose records were stored with the practice now face the risk that sensitive personal and clinical information has moved into the hands of criminals.

What's Publicly Reported from Reporting

Public reporting indicates the incident involves a ransomware deployment that led to both encryption and data theft. The pear Ransomware Group posted proof of the exfiltration on its leak site, listing Family Psychological Associates, a provider of mental health services. No exact victim count has been released, and the precise volume or contents of the stolen files remain undisclosed in available reporting. The posting appeared on the group’s onion site, which is tracked by ransomware monitoring services such as ransomware.live.

Industry research from sources such as DoxxScan™ continuous monitoring indicates that healthcare organizations continue to rank among the most targeted sectors because patient records contain names, addresses, dates of birth, Social Security numbers, insurance details, and clinical notes that hold long-term value on underground markets.

Why This Matters for You and Your Family

When a mental health provider is breached, the stakes extend beyond financial fraud. Exposed therapy notes, diagnoses, medication histories, and family relationship details can be used for blackmail, identity theft, or targeted harassment. If you or any member of your family has received counseling, psychological testing, or psychiatric care from Family Psychological Associates, your private information may now be in circulation.

Healthcare records are especially damaging because they link directly to real-world identity and can fuel doxxing campaigns that follow people for years. A single leak can cascade into loan fraud, insurance denial, employment discrimination, or even threats against children if family dynamics or custody details surface.

The Doxxing and Identity-Chain Risk

Ransomware groups rarely stop at posting generic samples. They often sell or publish full datasets that allow other criminals to connect an email address from the breach to usernames on social media, gaming platforms, and shopping accounts. This identity-chain mapping turns one breach into dozens of account takeovers. Gaming accounts belonging to children are particularly vulnerable because parents frequently reuse passwords or security questions that appear in family therapy records.

Once handles are linked to real names and addresses, doxxing escalates quickly. Harassers can locate your home, contact schools, or target family members using details that were never meant to leave a therapist’s office.

Pear Ransomware Group Track Record

Public reporting attributes the pear Ransomware Group with emerging in late 2024. The group has claimed responsibility for attacks on healthcare providers, professional services firms, and small-to-medium businesses. Its typical playbook begins with initial access through phishing or exploited remote desktop credentials, followed by lateral movement, data exfiltration, and deployment of ransomware. After encryption, the group waits a short period before publishing samples on its leak site to pressure victims into payment. Extortion demands usually combine threats of data publication with offers to delete the stolen files upon receipt of cryptocurrency.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, usernames, and real identity so you can see exactly what chains back to the Family Psychological Associates breach.
• Rotate any password you ever used at the practice anywhere it has been reused, and immediately enable two-factor authentication through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1 billion+ breach records and more than 100 platforms so the next exposure of your information is caught within hours instead of months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts, which often become the next link in doxxing chains after a parent’s data appears in a healthcare breach.
• Let DoxxScan remediation specialists handle takedown requests across data brokers and leak forums on your behalf while you focus on securing accounts and talking with your family.

The incident is a reminder that even organizations trusted with your most private information can be compromised without warning. Taking concrete steps now limits how far the stolen data can travel. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1B+ breach records and 100+ platforms, AI-powered identity-chain mapping, and hands-on remediation by specialists, with household coverage that includes children’s gaming accounts vulnerable to credential-stuffing attacks that follow leaks like this one.