Brookside Homes Listed by pear Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

Brookside Homes, a custom home builder based in Central Pennsylvania, has been listed by the ransomware group known as pear. The listing, reported on June 24, 2025, claims that internal files were exfiltrated in a ransomware attack. Public detail remains limited: the number of people affected is unknown, and no further confirmation of the incident has been independently verified beyond the group's claim.

For clients, partners, and anyone whose information may have been held by the company, the development raises practical questions about what data could be involved and what steps to take while fuller details are still unavailable.

What happened

According to available reporting, Brookside Homes appeared on the leak site associated with the pear ransomware group on or around June 24, 2025. The group claims that internal files were exfiltrated as part of a ransomware attack. No public information has been released about the precise date the intrusion began, how the attackers gained access, the volume of data taken, or whether systems were encrypted. The number of individuals potentially affected is listed as unknown. At present the listing itself constitutes an unverified claim by the group rather than a confirmed disclosure from the company or independent investigators.

Inside pear

Pear is a ransomware operation that follows a now-familiar double-extortion model. Groups of this type typically gain initial access through phishing, compromised credentials, or unpatched remote services, then move laterally to locate and copy sensitive files before deploying encryption. Once data has been stolen, the operators post the victim’s name on a dedicated leak site and threaten to publish the material unless a ransom is paid. Public reporting on pear has described the group as opportunistic rather than highly selective, targeting mid-sized organisations across multiple sectors. Specific claims made by pear about any single victim, including Brookside Homes, should be treated as assertions by the attackers until corroborated by other evidence.

Who is Brookside Homes?

Brookside Homes is a custom home builder that constructs high-end residences for clients across Central Pennsylvania. Companies of this kind routinely handle architectural plans, contracts, financial records, client contact details, and sometimes personal identification documents required for financing or permitting. Because the firm deals with private residential projects, a breach can affect not only the business itself but also individual homeowners, subcontractors, and suppliers whose information sits in project files or customer databases. The consequential nature of such an incident stems from the mix of commercial and personal data that custom builders typically retain over the life of a project.

What was likely exposed

The only data type named in connection with the listing is “internal files exfiltrated in ransomware attack.” Exact contents have not been disclosed. Organisations in the custom-home sector commonly hold client names and addresses, email correspondence, contracts, payment records, design documents, and employee or subcontractor information. Whether any of those categories were among the files taken remains unconfirmed. Public detail is limited to the group’s claim that internal files left the network.

Why it matters

If client or employee records were among the exfiltrated material, affected individuals face ordinary but real risks: targeted phishing that references genuine project details, attempts to open fraudulent accounts, or social-engineering calls that exploit knowledge of a recent home build. For Brookside Homes the exposure of internal files can disrupt operations, damage client trust, and create ongoing legal or regulatory obligations once the scope becomes clearer. Because the number of people affected is still unknown, the full scale of personal impact cannot yet be measured.

If your data was in this claimed breach

Until Brookside Homes or independent investigators provide more information, treat the possibility of exposure as provisional. Practical first steps include:

• Monitor bank and credit-card statements for unfamiliar charges.
• Place a free fraud alert with the major credit bureaus if you have recently done business with the company.
• Be cautious of unsolicited emails or calls that reference a home-building project or quote internal details.
• Change passwords on any accounts that reused credentials shared with Brookside Homes.
• Run a free exposure scan of your email address to check whether it has already appeared in known breach data sets.

These measures are precautionary. Further official statements from the company or law-enforcement agencies will be needed before anyone can determine with certainty whose information was involved.

AICompiled with AI assistance from public sources and published under our editorial standards.