PEAR — every breach we're tracking
Running log of incidents attributed to or claimed by PEAR in public reporting, with what was exposed and what victims should do. Updated as new incidents are ingested.
Incidents tracked1
Latest activityJune 10, 2026
TypeRansomware / extortion
Groups like PEAR steal data first and extort second — and the stolen records rarely stay private. Once a victim organization's data hits a leak site, the personal details inside (names, emails, phones, addresses) get scraped into the same broker-and-dump ecosystem every doxxer searches. If an organization you've used appears below, treat your data as circulating.
Other crews we track
Qilin (8)TheGentlemen (8)Akira (8)Nova (6)DragonForce (4)LockBit (4)Payload (4)ShinyHunters (3)
All trackers →
Close the chain attack
Both halves of the chain, cleaned once.
A breach put your credentials in 15.4B+ leaked records. Hackers chain that data to your address on 800+ broker sites. GalaxyWarden closes both halves for $19 once — no subscription required.
Clean both halves — $19 →
Free breach scan + 800+ broker letters + 30-day proof · one payment, no subscription
W
Warden Plus — ongoing monitoring
$9.99/mo
Warden Plus ($9.99/mo or $99/yr): weekly re-scans, breach alerts, AI Concierge, auto re-files on relisted brokers.