Skip to content
← All breaches
Threat actor tracker 16 incidents tracked

ExfilSquad — every breach we're tracking

Running log of incidents attributed to or claimed by ExfilSquad in public reporting, with what was exposed and what victims should do. Updated as new incidents are ingested.

Incidents tracked16
Latest activityJuly 26, 2026
TypeRansomware / extortion

Groups like ExfilSquad steal data first and extort second — and the stolen records rarely stay private. Once a victim organization's data hits a leak site, the personal details inside (names, emails, phones, addresses) get scraped into the same broker-and-dump ecosystem every doxxer searches. If an organization you've used appears below, treat your data as circulating.

Tracked incidents

high July 26, 2026

City of Houston Listed by ExfilSquad Ransomware Group

DATA SUMMARY: 6M~ records containing: significant PII, resident contact details, service requests, complaint descriptions, addresses, locati…

high July 26, 2026

UK Department for Education Listed by ExfilSquad Ransomware Group

DATA SUMMARY: Help Portal (~600K records) – Parent and staff contact records containing full names, email addresses, phone numbers, and job …

high July 26, 2026

Analog Devices Listed by ExfilSquad Ransomware Group

Revenue: $12.7B DATA SUMMARY: 570K~ records containing: customer PII and addresses.…

high July 26, 2026

Bonava Listed by ExfilSquad Ransomware Group

Revenue: SEK 8B DATA SUMMARY: 842K~ records containing: significant PII, property ownership/interests, warranty and repair cases, contracto…

high July 26, 2026

Viavi Solutions Listed by ExfilSquad Ransomware Group

Revenue: $1B DATA SUMMARY: 430K~ records containing: customer and partner contact information, significant PII, and enterprise account iden…

high July 26, 2026

Newcastle University Listed by ExfilSquad Ransomware Group

DATA SUMMARY: 440K~ records containing: applicant and student contact information, significant PII, and admissions data.…

high July 26, 2026

Zenith Bank Plc Listed by ExfilSquad Ransomware Group

Revenue: ₦2.3T DATA SUMMARY: 90M~ records containing: extensive PII, banking relationships, account information, financial data, government…

high July 26, 2026

Frontier Airlines Listed by ExfilSquad Ransomware Group

Revenue: $1.5B DATA SUMMARY: 2.4M~ records containing: significant PII, customer support cases, flight and travel information, complaint re…

high July 26, 2026

Police National Legal Database Listed by ExfilSquad Ransomware Group

DATA SUMMARY: 135k law enforcement contact records with first/last name, email, police force area, etc.…

high July 26, 2026

Wesco International Listed by ExfilSquad Ransomware Group

Revenue: $24B DATA SUMMARY: 2.6M~ records containing: customer and employee PII, account and contact data, CRM user profiles, credit and bu…

high July 26, 2026

Analog Devices Listed by ExfilSquad Ransomware Group

Revenue: $12.7B DATA SUMMARY: 570K~ records containing: customer PII and addresses.…

high July 26, 2026

City of Atlanta Listed by ExfilSquad Ransomware Group

DATA SUMMARY: 3M~ records containing: significant PII, citizen service requests, addresses, municipal case history, and internal case manage…

high July 26, 2026

TaylorMade & Sun Day Red golf Listed by ExfilSquad Ransomware Group

Revenue: $1.5B DATA SUMMARY: 2M~ records containing: significant PII, customer support history, orders, shipping information, business acco…

high July 26, 2026

Microsoft Listed by ExfilSquad Ransomware Group

Revenue: $318B DATA SUMMARY: 8M~ records containing: significant PII, employee and customer contact information, authentication data, passw…

high July 26, 2026

Allstate Listed by ExfilSquad Ransomware Group

Revenue: $67B DATA SUMMARY: 657K~ records containing: significant PII, recruitment and licensing information, onboarding data, and internal…

high July 26, 2026

District of Columbia Public Schools Listed by ExfilSquad Ransomware Group

District of Columbia Public Schools (DCPS) is a public school district serving Washington, D.C., USA. It operates as the primary government-…

Close the chain attack

Your email leaked. See who’s selling your address.

Nobody can unleak a breach. But the people-search sites selling your address because of it? Those come down. The free scan shows you which ones have you, in 15 seconds. Then you pick what fits.

Run my free scan
15 seconds · 13.1B+ records checked · no account, no card
W Choose your protection level COMPARE PLANS →
The full report on what your scan found, ongoing monitoring with weekly re-scans and breach alerts, or family-wide coverage — compare every plan and pick what fits.