Cyber Incident Victim: K & E Distributing
Date:
Jun 2026
Location:
—
Summary
K & E Distributing was targeted by the Pear ransomware group. The incident is recorded on a ransomware leak site that lists recent victims with icons indicating the attack vector, sector, and whether data was leaked or a ransom amount known. The entry is marked as AI‑generated with no additional details such as leak size or ransom amount provided. The site also shows that the discovery occurred recently, placing the victim among other organizations compromised around the same time.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 0 motives | 1 technique |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
On June 10, 2026, the ransomware.live website published an article titled 'Recent Victims' that cataloged a series of cyberattacks discovered over the preceding hours and days. The article presented a table of victims, each entry indicating the name of the organization, the ransomware group attributed to the attack, the time of discovery, and any available supplemental icons or notes. Among the entries listed was K & E Distributing, appearing alongside other companies such as Mundt and Associates, Rainbow Distributors USA, and Port Air Express. The article also included a legend explaining the meaning of various icons used to denote characteristics like screenshot availability, infostealer data presence, and known ransom amounts. The publication time of the article itself was noted as 2026-06-10, providing a timestamp for the compiled information. This context situates K & E Distributing within a broader snapshot of reported ransomware activity captured by the source.

The entry for K & E Distributing in the article specifies that the attack was attributed to the ransomware group known as Pear. It indicates that the incident was discovered on June 10, 2026, approximately nine hours before the article's publication timestamp. The entry is marked with an '[AI generated]' label and includes the notation 'N/A', indicating that no additional details such as website, revenue, leak size, or ransom amount were provided in the source. No further information about impacted systems, attacker actions, detection methods, containment steps, or consequences is present in the supplied material. Consequently, the narrative of the incident is limited to the factual elements of discovery time, responsible ransomware group, and the absence of supplemental data in the source.
