In May 2026, the Indian Creek Valley Water Authority, a public water utility, reportedly experienced a ransomware incident. The Pear ransomware group claimed responsibility for the attack. As of the current information, there is no official public breach notification or statement from the authority.
The specific types of data exposed, the number of individuals affected, and whether sensitive data such as SSN, medical, or financial information was involved remain unclear. No Attorney General filings or class-action lawsuits related to this incident have been found. It is also not detailed which states may have been affected.
While details can emerge later and notices may be delayed, the full scope of this incident is not yet publicly confirmed.