PEAR Claims 1.4 TB Stolen from Texas Rural Health Provider; SPRHS Has Not Confirmed
Summary
Ransomware group PEAR claims it exfiltrated about 1.4 TB of patient, employee, and business data from South Plains Rural Health Services. The organization has not publicly confirmed the incident.
Key points
- PEAR claims it exfiltrated approximately 1.4 TB from South Plains Rural Health Services, a Texas nonprofit healthcare provider.
- The allegedly stolen data reportedly includes personal and medical information about thousands of patients, plus employee, administrative, and business records.
- The intrusion, claimed data volume, and attack methods have not been publicly confirmed by SPRHS.
- DataBreaches says it contacted SPRHS and found no related notification on the Texas Attorney General's breach site at the time of publication.
- PEAR says it notified SPRHS on June 17; the article notes that this would suggest notifications to HHS and affected patients were due around August 17, while acknowledging the discovery date may differ.
Article Details
- Victim Organization
- South Plains Rural Health Services, Inc. (SPRHS)
- Incident Type
- Alleged ransomware attack and data exfiltration
- Disclosure Date
- 2026-08-29
- Data Types Exposed
- Personal information
- Medical information
- Employee documentation
- Administrative documentation
- Business operations documentation
- Affected Records
- Information relating to thousands of patients was reportedly included; no exact record count was provided.
- Affected Data Size
- Approximately 1.4 TB, according to PEAR's claim.
- Operational Impact
- Unknown; no operational disruption was reported.
- Ransom Or Extortion
- PEAR claimed responsibility for the attack and alleged data exfiltration. No ransom demand or extortion terms were reported.
- Claim Status
- claimed