Tas Nz Bay Limited Listed by pear Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

Tas Nz Bay Limited, a New Zealand-based firm offering financial advisory services, has been listed by the ransomware group known as pear. The listing, reported on July 08, 2025, claims that internal files were exfiltrated in a ransomware attack. Public detail remains limited: the number of people affected is unknown, and no further confirmation of the incident’s scale or method has been released beyond the group’s claim.

For clients and partners of a financial advisory business, any confirmed exposure of internal material raises practical questions about confidentiality and follow-on risk. At present the only concrete public statement is the leak-site listing itself.

What happened

According to the available record, Tas Nz Bay Limited was listed by the pear ransomware group on or around July 08, 2025. The group asserts that internal files were taken during a ransomware attack. No independent confirmation of the intrusion, the date of the attack, the volume of data, or any ransom demand has been published. The number of individuals potentially affected is listed as unknown. Beyond the claim of exfiltration of internal files, technical details of the method used remain undisclosed.

The group behind it: pear

Pear is a ransomware operation that follows the now-common double-extortion model: encrypting systems while also copying data and threatening to publish it if payment is not made. Like other groups in this category, it maintains a public leak site where it posts victim names and, in some cases, samples of stolen material to pressure organisations. Public reporting on pear has documented a pattern of targeting mid-sized businesses across various sectors, typically after initial access is gained through phishing, compromised credentials, or unpatched remote services. The group’s listing of Tas Nz Bay Limited should be treated as an unverified claim; no additional statements attributed specifically to this victim appear in the public record beyond the assertion that internal files were exfiltrated.

Tas Nz Bay Limited and its sector

Tas Nz Bay Limited describes itself as a firm of TAS NZ advisors dedicated to providing personalised financial solutions that help businesses thrive, based in the heart of New Zealand. Financial advisory practices of this type routinely handle sensitive commercial and personal information: client financial statements, tax records, investment details, business plans, and correspondence that may include bank account numbers, tax identifiers, and strategic commercial data. In New Zealand’s regulated financial-services environment, such firms are expected to maintain high standards of data protection because the material they hold can be used for fraud, identity theft, or competitive harm if it falls into the wrong hands. A breach affecting an advisory firm therefore carries consequences not only for the organisation but for the businesses and individuals who entrust it with their financial affairs.

The information in question

The only data type named in the public listing is “internal files” said to have been exfiltrated in a ransomware attack. No inventory of specific documents, no file counts, and no confirmation of whether client personal data, financial records, or employee information were included has been released. Organisations in the financial-advisory sector typically store client identity documents, account details, tax filings, contracts, and internal operational records. Because the exact contents remain unconfirmed, it is not possible to state which of these categories, if any, were involved. The claim of exfiltration stands as an assertion by the group rather than an independently verified fact.

Why it matters

If internal files from a financial advisory firm have been taken, the practical risks include misuse of commercial information for fraud or social-engineering attacks against clients, potential identity theft if personal identifiers were present, and reputational or regulatory consequences for the firm itself. Clients may face targeted phishing that references genuine details drawn from the stolen material. The organisation may incur costs related to investigation, notification, and remediation, and may face scrutiny under New Zealand privacy and financial-services rules. Because the number of people affected is unknown and the precise data types are undisclosed, the full extent of these risks cannot yet be measured; the listing alone is sufficient reason for caution and for individuals to monitor their own accounts and communications.

Were you affected?

If you are a client, partner, or employee of Tas Nz Bay Limited, treat the listing as a prompt to take basic protective steps. Review recent account statements and credit reports for unfamiliar activity. Change passwords on any accounts that may have been linked to the firm, and enable multi-factor authentication where available. Be alert for unsolicited emails or calls that reference your financial arrangements. You can also run a free exposure scan of your email address to check whether it has appeared in known breach data sets. Official confirmation or further detail from the organisation, if and when it is released, should guide any additional actions.

AICompiled with AI assistance from public sources and published under our editorial standards.