Brevard Skin Listed by pear Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

People who have sought care at Brevard Skin may now face questions about whether their personal or medical information was taken in a ransomware incident. On September 28, 2025, the organization was listed by the pear ransomware group, which claims internal files were exfiltrated. The number of people affected remains unknown, and public detail on the exact contents of those files is limited. For patients and staff, the practical stakes center on the possibility that sensitive health-related records could be misused for identity fraud, targeted scams, or further privacy harm.

This report sets out only what has been reported, places the claim in context, and outlines concrete steps individuals can take while the full picture stays incomplete.

Inside the incident

According to the available record, Brevard Skin was listed by the pear ransomware group on September 28, 2025. The group claims that internal files were exfiltrated as part of a ransomware attack. No confirmed figure for the number of people affected has been published, and the precise method of intrusion, the duration of unauthorized access, and any ransom demand remain undisclosed. Public reporting does not state whether systems were encrypted, whether operations were disrupted, or whether the organization has confirmed the listing. The only concrete assertion available is the group's claim of data theft involving internal files.

Because the scale and technical details have not been released, it is not possible to determine from public sources how widely the incident reached or which systems were involved. The listing itself functions as a claim by the threat actor rather than an independently verified disclosure by Brevard Skin.

Inside pear

Pear operates as a ransomware group that, like many contemporary actors in this space, is known publicly for double-extortion tactics: encrypting systems where possible and threatening to publish stolen data on a dedicated leak site if payment is not made. Such groups typically advertise victims on those sites to increase pressure, often posting samples or file listings to demonstrate possession of data. Prior public activity associated with similar ransomware operations has included targeting organizations across healthcare, professional services, and other sectors that hold valuable records. Specific claims made by pear about Brevard Skin beyond the listing and the assertion of internal-file exfiltration are not detailed in the available facts; any further statements from the group should be treated as unverified claims until corroborated.

Ransomware groups of this type commonly rely on initial access through phishing, exploited vulnerabilities, or compromised credentials, then move laterally to locate and copy data before deploying encryption. Public knowledge of pear does not include unique technical signatures confirmed for this particular incident, so attribution rests on the group's own leak-site listing.

Who is Brevard Skin?

Brevard Skin is a dermatology practice dedicated to providing comprehensive care for a wide range of skin, hair, and nail conditions. Organizations of this kind routinely collect and store patient identifiers, medical histories, treatment notes, insurance details, and contact information in order to deliver clinical services and manage billing. Because dermatology practices handle protected health information under U.S. privacy rules, a breach claim carries heightened consequence: the data involved is often more sensitive and longer-lived than ordinary commercial records.

A listing of such a practice by a ransomware group therefore raises immediate questions about patient privacy and the integrity of clinical records, even when the precise scope remains unconfirmed. The sector's reliance on electronic health records and connected systems makes these organizations frequent targets for actors seeking high-value data.

What was likely exposed

The facts state only that internal files were exfiltrated in a ransomware attack. No inventory of specific data types—such as names, dates of birth, Social Security numbers, clinical notes, or insurance identifiers—has been publicly confirmed. Organizations that deliver dermatological care typically maintain electronic medical records containing patient demographics, diagnoses, treatment plans, photographs of conditions, billing data, and correspondence with insurers or referring physicians. It is reasonable to expect that some combination of these categories could be present among internal files, yet the exact contents remain unconfirmed.

Until Brevard Skin or independent investigators release a verified description, any assumption about particular fields or the volume of records would be speculative. The group's claim establishes only that data left the environment; it does not establish which patients or staff members, if any, are affected.

The real-world impact

For individuals whose information may have been taken, the primary risks are identity theft, medical identity fraud, and phishing that leverages accurate personal or clinical details. Stolen health data can be used to open fraudulent accounts, submit false insurance claims, or craft convincing social-engineering messages. Because medical records cannot be changed like a password, the exposure window can last years. Emotional distress and the administrative burden of monitoring credit and medical statements are common secondary effects.

For the organization, a ransomware listing can disrupt clinical operations, trigger regulatory notification duties, and require forensic investigation and remediation costs. Reputation and patient trust may also be affected while the facts remain incomplete. None of these outcomes has been independently quantified in public reporting for this incident; they represent the ordinary range of consequences observed in comparable healthcare ransomware events.

What to do if you're exposed

If you have been a patient or employee of Brevard Skin, treat the listing as a reason for caution rather than confirmed personal compromise. Practical first steps include:

• Request a free credit report from each of the major bureaus and review it for unfamiliar accounts or inquiries.
• Place a fraud alert or credit freeze if you see suspicious activity or simply want added protection.
• Monitor Explanation of Benefits statements from insurers for services you did not receive.
• Be skeptical of unsolicited calls, emails, or texts that reference your medical history or claim to be from the practice.
• Change passwords on any accounts that reused credentials associated with the practice, and enable multi-factor authentication where available.
• Consider a free exposure scan of your email address to check whether it has already appeared in known breach data sets.

Keep records of any notifications you receive from Brevard Skin or regulators, and follow official guidance if a formal breach notice is issued. Public detail remains limited; further verified information from the organization or authorities will clarify the true scope.

AICompiled with AI assistance from public sources and published under our editorial standards.