National Health Fund Listed by pear Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On June 10, 2026, the ransomware group pear listed an organization named National Health Fund on its leak site. The report states that internal files were exfiltrated during a ransomware attack. No figure for the number of people affected has been released, and no additional technical details have been confirmed by any party. Public information about the incident is limited to the group’s listing. The name National Health Fund is used by multiple unrelated entities in different countries, which further restricts the ability to tie the claim to one specific organization.

Inside the incident

The only facts released describe the exfiltration of internal files in a ransomware attack. No date for the initial compromise, no description of the intrusion method, and no estimate of data volume have been published. It remains unconfirmed whether any data was subsequently published or whether the organization acknowledged the listing.

The group behind it: pear

Pear is a ransomware operator that maintains a public leak site to pressure victims. The group’s standard approach involves encrypting systems and then claiming to have copied data, publishing samples or directories when payment is not received. Its listing of National Health Fund constitutes the group’s assertion that it obtained material from the organization; independent verification of that claim has not been reported.

National Health Fund and its sector

Entities operating under the name National Health Fund typically manage health-related financial or administrative records. Because the name is generic, the precise location and mandate of the listed organization are not established in available reporting. Health-sector bodies routinely process records that include personal identifiers and medical or financial details, making any confirmed intrusion a matter of regulatory and privacy interest.

The information in question

The listing refers only to “internal files.” No inventory of file types, no confirmation that personal data is present, and no statement on the sensitivity of the material have been supplied. Organizations of this kind commonly hold administrative correspondence, financial ledgers, and patient-related records, yet the exact contents tied to this incident remain unconfirmed.

The real-world impact

Exposure of internal files from a health-fund entity could affect the privacy of individuals whose records are held by the organization. Potential consequences include unauthorized use of personal information or follow-on fraud attempts. For the organization, the incident may trigger regulatory notification requirements and operational costs associated with investigation and remediation, though the scale of these effects cannot be quantified from current public information.

What to do if you're exposed

Individuals concerned about possible exposure should monitor official statements from any National Health Fund entity with which they have a relationship. Practical first steps include changing passwords for any associated accounts, enabling multi-factor authentication, and reviewing financial and medical statements for unusual activity. Readers can run a free exposure scan of their email address against known breach data to check whether their information appears in published lists.

AICompiled with AI assistance from public sources and published under our editorial standards.