Tostrud & Temp, S.C. Data Breach

Tostrud & Temp, S.C., a business services company based in the United States, has been identified as a victim by the Pear ransomware group. The listing was published on July 8, 2026, on the group’s dark web portal. This incident was detected through SOCRadar’s Dark Web Monitoring service. The professional and business services sector is frequently targeted by ransomware groups due to the sensitive client data handled by such organizations. Tostrud & Temp, S.C.’s listing aligns with Pear’s recent pattern of targeting US-based professional services firms.

Initial access was investigated by querying SOCRadar’s stealer-log telemetry for the domain tntcpas.com. The query returned no relevant records, indicating no evidence of compromise through this specific dataset at the time of collection. However, this does not rule out a breach, as credentials could have been sourced from other feeds, rotated before indexing, or harvested via personal email aliases. Ransomware groups like Pear are known to use infostealer-harvested credentials to gain initial access to corporate networks, compromising systems via methods like Microsoft 365 logins, VPNs, or remote-access portals. CTI teams are advised to maintain vigilance and conduct ongoing credential hygiene checks, rather than assuming a lack of evidence equates to no compromise.

Disclaimer

This report is intended for threat intelligence and security awareness purposes. SOCRadar does not host, redistribute or buy stolen data. All breach information reported here is collected from publicly accessible threat actor and ransomware portals. This content is intended to equip CTI teams with context around recent attacks. While we strive for accuracy, listings on ransomware leak and extortion sites cannot always be independently verified and may not reflect confirmed breaches. If you believe any data in this report is incorrect, please contact us.