Rocky Mountain Associated Physicians Listed by pear Ransomware Group

On January 26, 2026, the pear Ransomware Group added Utah’s Rocky Mountain Associated Physicians to its public leak site, claiming that internal files had been exfiltrated from the Salt Lake City bariatric surgery practice.

What's Publicly Reported from Reporting

Public reporting indicates the group listed the clinic, known for surgical and medical weight-loss solutions, after claiming a ransomware attack. The leak site entry shows that internal files were allegedly exfiltrated. The exact number of patients or employees affected remains unknown, and the specific types of records posted have not been independently verified beyond the group’s own statements. Available reporting describes the incident as part of the group’s pattern of publishing victim data when ransom demands go unmet.

Why This Matters for You and Your Family

If you or anyone in your household has ever been a patient at Rocky Mountain Associated Physicians, your personal information may now sit on a dark-web leak site. Medical records often contain names, dates of birth, Social Security numbers, addresses, insurance details, and clinical notes. Once exposed, this data can be sold, traded, or used to file fraudulent tax returns, open accounts in your name, or pressure you for payment. Your family members listed as emergency contacts or guarantors on those records face the same risk even if they never received treatment themselves.

The Doxxing and Identity-Chain Implications

Medical breaches create long identity chains. A single leaked email or phone number can be linked to your gaming accounts, social-media handles, family-member profiles, and home address. Attackers follow these connections to build detailed dossiers. Credential leaks like this one frequently cascade into account takeovers across unrelated services. Public reporting shows that children’s gaming usernames tied to a parent’s email are regularly targeted once the household link is established, turning one breach into repeated harassment or financial fraud.

Pear Ransomware Group’s Known Track Record

Public reporting attributes the pear Ransomware Group with emerging in late 2024. The group has listed healthcare providers, manufacturers, and professional service firms. Its typical playbook involves initial access through phishing or remote-desktop vulnerabilities, followed by data exfiltration and encryption. When ransom is not paid, the group publishes samples on its leak site and sometimes contacts victims directly with escalating extortion demands. Exact success rates and prior victim counts are difficult to confirm, but industry trackers list pear among active double-extortion operators.

What to do

• Run a DoxxScan to map every link between your emails, phones, handles, and real identity so you can see exactly what chains back to the Rocky Mountain Associated Physicians records.
• Rotate any password you ever used at the clinic anywhere it has been reused, and switch to 2FA through an authenticator app instead of text messages.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure is caught in hours rather than months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts that could be reached through the same leaked address or email.
• Let remediation specialists handle takedown requests across data brokers and leak sites while you focus on securing your own accounts.

The incident shows that even a single specialty clinic breach can expose an entire household’s digital footprint. Acting quickly limits how far attackers can travel down the identity chain. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full family coverage that includes children’s gaming accounts. Starting protective steps now reduces the chance that this leak becomes the first link in a longer campaign against you and your family.