South Plains Rural Health Services Inc. (SPRHS), a Federally Qualified Health Center in West Texas, experienced a ransomware attack by the PEAR group. The incident was publicly disclosed on July 15, 2026, with SPRHS reportedly discovering the breach on July 16, 2026. This attack involved the exfiltration of internal files.
The specific types and quantity of data exposed remain unconfirmed by SPRHS. Based on typical PEAR group exfiltrations and the nature of healthcare records, the compromised internal files likely include appointment histories, insurance details, Social Security numbers, and dates of birth. The PEAR leak site does not specify the number of affected patients or employees, and no sample data has been posted.
As of July 17, 2026, SPRHS has not released an official notification letter or statement, and there are no recorded filings with the Texas Attorney General. Texas law requires notification to the Attorney General within 30 days if a breach affects 250 or more residents. Details regarding the number of affected individuals and specific data types are expected to emerge with official notifications.