Tas Nz Bay Limited Listed by pear Ransomware Group

On July 8, 2025, TAS NZ Bay Limited appeared on the leak site of the pear ransomware group. The New Zealand-based financial advisory firm, which provides personalised services to help businesses grow, is claimed to have had internal files exfiltrated during a ransomware attack. While the exact number of people affected remains unknown, anyone whose financial records, correspondence or personal details were stored in those systems could now be exposed.

What Public Reporting Shows

Public reporting indicates that pear listed TAS NZ on its data leak portal after the company apparently declined to meet the group's demands. The exposed material consists of internal files exfiltrated in a ransomware incident. No precise count of records or individuals has been published. The breach follows the group's standard pattern of stealing data before encrypting systems and then threatening to publish it.

Why This Matters for You and Your Family

When a financial advisory firm suffers a breach, the information involved often includes names, addresses, dates of birth, tax details, bank account numbers and correspondence that can be used to build a profile of your finances. If you or your family have ever used TAS NZ's services, or if your employer or accountant has shared documents with them, your data may now sit in a ransomware leak repository. Financial records are especially dangerous because they allow criminals to attempt identity theft, loan fraud or targeted phishing that feels personal and credible.

Even if you were not a direct client, these leaks frequently contain employee records, supplier contracts or client lists that name ordinary people. Once published, the data spreads quickly across underground forums where it can be combined with other stolen information.

The Doxxing and Identity-Chain Implications

Ransomware leaks rarely stop at one company. Criminals use the exposed files to map connections between email addresses, phone numbers, usernames and real-world identities. A single leaked document can reveal your home address, children's names or family email accounts. This information fuels doxxing campaigns that escalate into harassment, SIM-swapping or account takeovers. Credential leaks like this one often cascade into gaming platforms, where children's accounts become entry points for further targeting because the same passwords or recovery emails are reused.

Pear Ransomware Group's Known Track Record

Public reporting attributes the attack to the pear ransomware group. The group emerged in late 2024 and has targeted organisations across multiple countries with a playbook of initial access through phishing or exploited remote desktop services, followed by data exfiltration and encryption. They then demand payment and, if unmet, publish samples on their leak site to pressure victims. Notable prior targets have included companies in healthcare, manufacturing and professional services, though exact details vary across incident reports.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, usernames and real identity so you can see exactly what this leak connects to.
• Rotate any password you used at TAS NZ or with related financial services, then enable 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure of your data is caught within hours instead of months.
• Cover the household with DoxxScan family protection that extends to your children's gaming accounts, which often chain back to the same addresses and recovery details leaked in incidents like this.
• Let remediation specialists handle takedown requests for any exposed personal documents that appear on data broker or leak sites.

The incident shows how quickly financial and personal data can move from a single company's servers into the hands of organised criminals. Taking concrete steps now limits how far the breach can reach. DoxxScan by GalaxyWarden offers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping that links online handles to real identities, and hands-on remediation by specialists who manage takedowns for you. Its household coverage includes children's gaming accounts that are frequently swept up in these cascading leaks.