Office Furniture Group Listed by pear Ransomware Group: Ransomware Claim — What’s Alleged & What To Do
Office Furniture Group was listed by the pear ransomware group on May 09, 2026, after internal files were exfiltrated in a ransomware attack. An undisclosed number of people may have been affected; check whether your information was exposed and take protective steps.
Ransomware groups continue to target organisations across sectors as part of a broader pattern of data theft and extortion that has persisted through 2025 and into 2026. On 9 May 2026 the Office Furniture Group, described as an interior workplace solutions provider, appeared on a listing associated with the pear ransomware group. Public information remains limited to the listing itself and a brief statement that internal files were allegedly exfiltrated; the number of individuals affected and the precise contents of those files have not been disclosed.
Breaking down the breach
The incident was reported on 9 May 2026 through the appearance of Office Furniture Group on the pear group’s leak site. The only confirmed detail is that internal files were removed during a ransomware operation. No figure for the volume of data, the number of people affected, or the timeline of the intrusion has been released. It is not known whether the organisation received a ransom demand, whether any payment occurred, or whether the files were subsequently published.
The group behind it: pear
Pear is a ransomware operator that maintains a public leak site to list victims and, in some cases, to release stolen material when negotiations fail. The group follows the double-extortion model common among current ransomware actors: data are copied before encryption, and the threat of publication is used to increase pressure. Public records show pear has claimed responsibility for intrusions at organisations in multiple countries and industries over the past two years. In this instance the group claims Office Furniture Group as a victim; that claim has not been independently verified beyond the listing.
Who is Office Furniture Group?
Office Furniture Group supplies interior workplace solutions, a sector that routinely manages contracts, design specifications, client records and supplier information. Such organisations hold data that can include contact details for corporate clients, project documentation and internal operational records. A breach at a firm of this type is consequential because the material can contain commercially sensitive information whose exposure may affect client relationships or competitive positions even when personal data are not involved.
The information in question
The only description provided is that internal files were allegedly exfiltrated. No inventory of file types or data categories has been published. Organisations in this sector commonly store client contact information, contract terms, floor plans and employee records, yet the exact contents of the exfiltrated material remain unconfirmed.
What's at stake
Exposed internal files can reveal business relationships, pricing structures and operational details that may be used for competitive intelligence or further targeting. If personal data are present, affected individuals could face increased risk of phishing or identity-related fraud. For the organisation, the incident may lead to regulatory scrutiny, remediation costs and reputational effects, though the scale of these consequences cannot be assessed from currently available information.
Were you affected?
Individuals who have done business with Office Furniture Group or its clients have no confirmed way to determine exposure from public statements. Practical first steps include monitoring email and postal addresses for unusual activity and reviewing account statements for unauthorised transactions. Readers can run a free exposure scan of their email address against known breach data sets to check for prior appearances in published records.
- Change passwords for any accounts linked to the organisation and enable multi-factor authentication.
- Watch for unsolicited messages that reference workplace projects or contracts.
- Contact the organisation directly for any official notification it may issue.
AICompiled with AI assistance from public sources and published under our editorial standards.
How this breach connects
More recent breaches
Metropolitan Construction Systems Listed by pear Ransomware GroupCNW Electronics Pte Ltd Listed by pear Ransomware GroupAC Beverage, Inc. Listed by pear Ransomware GroupSpector and Lenz, PC Listed by pear Ransomware GroupLatest breaches
Read GalaxyWarden’s full analysis of the Office Furniture Group Listed by pear Ransomware Group →
Publicly posted by pear — unverified claim, pending independent verification
Breach listings — particularly those originating from ransomware or leak sites — are third-party claims that may be unverified, incomplete, or inaccurate. A listing does not by itself confirm that a breach occurred or that any specific data was exposed. Severity is an automated assessment, not a definitive rating. Verification status is shown where available.
Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. This information is aggregated from public sources for awareness only and is not legal, security, or investment advice.