Viavi Solutions Listed by ExfilSquad Ransomware Group

On July 26, 2026, optical networking firm Viavi Solutions was listed on the leak site of the ExfilSquad ransomware group. The listing states that internal files were exfiltrated during a ransomware attack. The company, which generates roughly $1 billion in annual revenue, has not yet published a formal breach notification detailing the exact scope, leaving the precise number of affected individuals unknown at this time.

Reported Details from the Leak Site

The ExfilSquad leak page indicates that internal files were stolen and that the data includes customer and partner contact information, significant PII, and enterprise account identifiers. The disclosure estimates approximately 430,000 records were impacted. The listing does not specify the exact systems breached, the precise date of initial compromise, or the ransom demand amount. As of the publication of the leak, ExfilSquad has not publicly released samples of the stolen data beyond the initial announcement.

Why This Matters for You and Your Family

If you or any member of your household has done business with Viavi Solutions, worked with one of their partners, or had your information stored in their enterprise systems, your personal details may now be in the hands of extortionists. Significant PII typically includes names, addresses, dates of birth, Social Security numbers, or driver’s license data. Exposure of this information combined with contact details creates immediate risk of identity theft, tax fraud, and targeted phishing campaigns against you and your family.

The Doxxing and Identity-Chain Risk

Ransomware groups like ExfilSquad rarely stop at simple data dumps. Once customer and partner records containing PII and account identifiers are obtained, attackers and subsequent buyers can link those identities across multiple platforms. An email or phone number from the Viavi leak can be cross-referenced with gaming accounts, social media handles, or reused passwords, rapidly building a complete profile. This is exactly how credential leaks cascade into full doxxing chains that affect not just the primary victim but also spouses, children, and other household members. Gaming accounts belonging to teenagers are particularly vulnerable because they often share the same email address or recovery phone number listed in corporate customer databases.

ExfilSquad’s Known Track Record

Public reporting attributes ExfilSquad with emerging in late 2024 as a double-extortion operation that emphasizes data exfiltration over encryption. The group has targeted organizations across technology, manufacturing, and professional services sectors. Their typical playbook involves initial access through compromised credentials or vulnerable remote desktop services, followed by extensive internal reconnaissance, exfiltration of sensitive files, and then publication on their leak site when victims refuse to pay. The Viavi Solutions listing fits this pattern: the group claims to have stolen internal files containing customer and partner data rather than focusing solely on encryption.

What to Do

• Run a DoxxScan to map every link between your emails, phone numbers, handles, and real-world identity so you can see exactly what the Viavi exposure connects to.
• Rotate any password you ever used at Viavi Solutions or its partner portals anywhere else it has been reused, and immediately enable 2FA using an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 15.4B+ breach records and 100+ platforms so the next time your information surfaces you are alerted within hours instead of months.
• Cover the entire household with DoxxScan family protection, which includes dependents and children’s gaming accounts that frequently chain back to the same addresses and contact details exposed in corporate breaches.
• Let DoxxScan remediation specialists manage takedown requests and broker removals on your behalf while you focus on securing your own accounts.

The Viavi Solutions breach is a reminder that even established technology companies with substantial revenue remain targets, and the data they hold about customers and partners can quickly become ammunition for identity thieves and doxxers. Protecting yourself requires more than changing a single password. DoxxScan by GalaxyWarden delivers continuous monitoring across billions of records, AI-powered identity-chain mapping, and hands-on remediation by specialists, with full household coverage that explicitly protects both adult accounts and children’s gaming identities. Start today so this breach does not become the first link in a longer chain of compromise.