PEAR Ransomware Hits Medical Billing Firm, 1.2 Million Exposed

MCBS, a medical business management company, has disclosed a data breach affecting 1.2 million individuals following a ransomware attack claimed by the PEAR group. The attackers assert they exfiltrated three terabytes of information from the firm's systems.

Medical business management companies handle billing, collections, and administrative functions for healthcare providers — making them repositories of patient demographic data, insurance details, and treatment records. The volume claimed by PEAR suggests comprehensive access to MCBS operational databases.

The PEAR ransomware group has emerged as part of the ongoing fragmentation of the ransomware-as-a-service ecosystem. Like other groups targeting healthcare supply chains, PEAR appears to prioritize data exfiltration over encryption, leveraging the sensitivity of medical records for extortion. This approach exploits both regulatory exposure under HIPAA and reputational risk to healthcare organizations.

• 011.2 million patients face identity theft and fraud risk from exposed medical records
• 02Healthcare providers using MCBS may face regulatory scrutiny over vendor risk management
• 03Insurers and payers should audit third-party billing contractors for data security gaps
• 04PEAR's targeting pattern suggests continued focus on healthcare supply chain vulnerabilities