ARC Dialysis LLC Listed by pear Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

Ransomware groups continue to target healthcare providers because the data they hold is both sensitive and operationally critical. On 7 April 2026 the independent dialysis service provider ARC Dialysis LLC appeared on a listing associated with the pear ransomware group, which stated that internal files had been taken during an attack.

The number of individuals affected and the precise contents of the files remain undisclosed. The incident is one of many recent listings of medical-service organisations, underscoring the sector’s persistent exposure to data-exfiltration operations.

What happened

ARC Dialysis LLC was listed by the pear ransomware group on or around 7 April 2026. The group’s post indicated that internal files had been exfiltrated in a ransomware attack. No further details on the timing of the intrusion, the volume of data, or the method of initial access have been made public. The number of people whose information may be involved is also unknown.

The group behind it: pear

Pear is a ransomware operation that maintains a leak site to publish data it claims to have stolen from victim organisations. Like other groups in this category, it typically combines file encryption with the threat of public disclosure to pressure targets. Public reporting on pear has documented similar listings of organisations in regulated sectors, though the accuracy of any individual claim on its site is not independently verified unless confirmed by the affected entity.

Who is ARC Dialysis LLC?

ARC Dialysis LLC operates as an independent provider of dialysis services. Organisations of this type routinely collect and store patient medical histories, treatment records, insurance details and contact information in order to deliver ongoing care. A breach at such a provider is consequential because the data involved is both personal and health-related, categories that receive heightened regulatory protection in most jurisdictions.

What was likely exposed

The only information released states that internal files were exfiltrated. Specific data types have not been disclosed. Organisations providing dialysis services commonly maintain electronic health records, laboratory results, billing information and employee files. Until ARC Dialysis LLC or an official investigation publishes a more detailed inventory, the exact categories and volume of records involved cannot be confirmed.

The real-world impact

Individuals whose records appear in the exfiltrated files could face risks of medical-identity theft or misuse of personal health information. For the organisation, the incident may trigger regulatory notification requirements and operational costs associated with investigation and remediation. Because the scale remains unknown, the full extent of these consequences cannot yet be assessed.

What to do if you're exposed

Anyone who receives a notification from ARC Dialysis LLC or who believes their information may be involved should review statements from the provider for recommended steps. Standard precautions include monitoring financial and insurance accounts for unusual activity and placing fraud alerts with credit bureaus where applicable. Readers can also run a free exposure scan of their email address against known breach data to check for prior appearances in public listings.

AICompiled with AI assistance from public sources and published under our editorial standards.