Caretaker Landscape and Tree Management Listed by Pear Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

Ransomware crews continue to pressure organisations by posting names on leak sites before any independent confirmation exists. In that climate, a listing is a claim and a negotiating tactic, not a verified incident report. On October 16, 2026, the group known as Pear listed Caretaker Landscape and Tree Management on its leak site. The company has not publicly confirmed the claim as of writing. Public detail is limited: the number of people who might be affected is unknown, and the listing does not disclose what data, if any, was taken.

For customers, employees, and partners of a commercial landscape firm, the practical question is not whether a headline sounds dramatic. It is what a leak-site claim does and does not establish, and what cautious steps make sense if personal or business information were ever involved.

Inside the listing

According to the listing, Pear has named Caretaker Landscape and Tree Management on its leak site. The reported date associated with that appearance is October 16, 2026. Beyond the organisation’s name and the group’s claim, the public record supplied for this write-up does not describe how access was supposedly gained, whether any files were copied, how large a set of material might be involved, or when an intrusion—if one occurred—began or ended.

The listing’s own description of services associated with the company refers to full-service commercial landscape and development work such as pruning, fertilization, mowing, renovation, and aeration. That language characterises the business line; it is not an inventory of stolen records. People affected are listed as unknown. Data types named as exposed are not disclosed. Nothing in the available facts confirms exfiltration, publication of files, or a ransom payment timeline. A leak-site entry establishes that a group chose to name a business; it does not, by itself, prove the scale or reality of a breach.

Inside Pear

Pear is known publicly as a ransomware and extortion-style actor that uses leak sites to increase pressure on organisations it claims to have compromised. Groups in this category typically allege that they obtained internal data, threaten to publish or auction material, and use countdown-style pages or sample files as part of their messaging. Those patterns are part of how such crews operate in general; they are not proof of what happened in any single case.

For this listing, the only incident-specific assertion available here is that Pear has listed Caretaker Landscape and Tree Management. The group claims association with that name on its site. No confirmed technical indicators, negotiation details, or independently verified file samples are included in the facts provided for this article. Readers should treat Pear’s statements as unverified claims until a company statement, regulator notice, or other primary confirmation appears.

Who is Caretaker Landscape and Tree Management?

Caretaker Landscape and Tree Management is presented in the available summary as a provider of full-service commercial landscape and development services, including pruning, fertilization, mowing, renovation, and aeration. Firms in this sector typically work with property owners, property managers, commercial sites, and sometimes municipal or institutional clients. Day-to-day operations often involve scheduling, site plans, equipment and crew coordination, invoicing, and supplier relationships.

A claimed incident involving such a business matters because landscape and grounds contractors sit in operational supply chains: they may hold contact details for clients and staff, job locations, billing records, and correspondence that ties people to properties and contracts. Even when a listing does not prove theft, the sector’s ordinary data footprint explains why customers and employees pay attention when a crew names a company. Consequence here is about potential exposure of ordinary business and personal identifiers—if any were taken—not about public drama.

The information in question

The facts state that data types named as exposed are not disclosed. It is therefore not possible to assert which systems, folders, or record categories were involved, or whether any were involved at all. The listing does not supply a verified inventory.

If files were taken from a commercial landscaping and tree-management firm, organisations of this kind typically hold materials such as customer and prospect contact lists, service agreements, invoices and payment references, employee names and work contact details, scheduling and crew assignment information, site addresses and access notes, vendor and subcontractor records, and routine email or document archives. Some firms also retain photos or plans related to properties. None of that list is confirmed as part of this claim; it is a sector-typical picture offered only so readers can judge conditional risk. Exact contents remain unconfirmed.

What's at stake

For individuals, the stakes—if personal data were ever included—are familiar rather than exotic: unwanted contact, phishing that references real jobs or invoices, attempts to reset accounts using known email addresses, or fraud that misuses names, phone numbers, or billing relationships. Commercial clients could face social-engineering attempts that cite genuine project details. Employees could see work email or HR-adjacent information misused for credential theft. None of these outcomes is established by the listing alone; they are the usual harms people weigh when a ransomware group names a service provider.

For the organisation, a public extortion listing can create reputational strain, distract operations, and force costly verification work even when claims are incomplete or false. Partners may ask for assurances. Insurers, banks, or large clients may request incident clarity the company cannot yet give if nothing is confirmed. The listing itself does not prove negligence, poor architecture, or failed detection; those conclusions would require a verified incident and a proper investigation, neither of which is in the facts here. What the listing establishes is pressure and uncertainty, not a finished forensic picture.

Steps worth taking either way

Treat the situation as unconfirmed. If you are a customer or employee and you are unsure whether your information could be involved, watch for unexpected messages that reference landscaping work, invoices, or staff names, and verify any payment or password request through a channel you already trust. Prefer unique passwords and multi-factor authentication on email and financial accounts. If you receive a notice from the company later, follow that guidance rather than leak-site marketing.

If you simply want a baseline check, you can run a free exposure scan of your email to see whether your address has already appeared in known breach datasets unrelated to this claim. That kind of check does not prove or disprove Pear’s listing; it only helps you see whether your credentials or contact details are already circulating elsewhere. Stay alert to official statements from Caretaker Landscape and Tree Management. Until the company or another authoritative source confirms details, the responsible posture is conditional caution—not assumption that your data is already out.

AICompiled with AI assistance from public sources and published under our editorial standards.