Polycom Listed by everest Ransomware Group

On February 2, 2026, Polycom appeared on the leak site of the Everest ransomware group after the company’s internal files were allegedly exfiltrated during a ransomware attack.

What's Publicly Reported from Reporting

Public reporting indicates that Everest posted Polycom to its data-leak portal, claiming to have stolen internal company documents. The exact number of files and their precise contents remain undisclosed in available reporting. Polycom, now part of HP Inc. following earlier acquisitions, provides video-conferencing hardware and software used by businesses and households worldwide. No confirmed count of affected individuals has been released, and the company has not yet issued a public statement detailing the scope of the breach. The leak site listing serves as the primary public evidence of the incident.

Why This Matters for You and Your Family

When a collaboration-technology provider like Polycom suffers a breach, the exposed internal files can contain contact lists, support tickets, licensing records, or partner agreements that include personal details of everyday customers. If your email, phone number, or home address appears in those records, the information can surface on dark-web marketplaces within days. Credential leaks from such incidents often cascade into account takeovers on video-conferencing platforms, email, and other services your family relies on for school, work, and personal communication. The breach therefore carries direct consequences for any household that has used Polycom or Plantronics products in the past decade.

The Doxxing and Identity-Chain Risks

Stolen internal files frequently link usernames, email addresses, and phone numbers to real-world identities. Attackers can combine this data with information from earlier breaches to build detailed profiles. A single leaked support ticket might reveal your child’s name alongside a gaming account handle, creating an identity chain that leads to doxxing or targeted harassment. Public reporting describes these chains as a common outcome when corporate collaboration tools are compromised, because the same credentials used for work calls are often reused on personal and family devices.

Everest Ransomware Group Track Record

Public reporting attributes the Everest ransomware group with emerging in 2021. The group has listed hundreds of organizations on its leak sites, including healthcare providers, manufacturers, and technology firms. Its typical playbook begins with initial access through phishing or exploited remote-desktop services, followed by exfiltration of sensitive files before encryption. Everest then demands payment and, upon non-payment, publishes samples or full datasets on its onion-site portal to pressure victims. The Polycom listing follows