ExfilSquad — every breach we're tracking
Running log of incidents attributed to or claimed by ExfilSquad in public reporting, with what was exposed and what victims should do. Updated as new incidents are ingested.
Groups like ExfilSquad steal data first and extort second — and the stolen records rarely stay private. Once a victim organization's data hits a leak site, the personal details inside (names, emails, phones, addresses) get scraped into the same broker-and-dump ecosystem every doxxer searches. If an organization you've used appears below, treat your data as circulating.
Tracked incidents
Bonava Listed by ExfilSquad Ransomware Group
Revenue: SEK 8B DATA SUMMARY: 842K~ records containing: significant PII, property ownership/interests, warranty and repair cases, contracto…
TaylorMade & Sun Day Red golf Listed by ExfilSquad Ransomware Group
Revenue: $1.5B DATA SUMMARY: 2M~ records containing: significant PII, customer support history, orders, shipping information, business acco…
City of Houston Listed by ExfilSquad Ransomware Group
DATA SUMMARY: 6M~ records containing: significant PII, resident contact details, service requests, complaint descriptions, addresses, locati…
Newcastle University Listed by ExfilSquad Ransomware Group
DATA SUMMARY: 440K~ records containing: applicant and student contact information, significant PII, and admissions data.…
UK Department for Education Listed by ExfilSquad Ransomware Group
DATA SUMMARY: Help Portal (~600K records) – Parent and staff contact records containing full names, email addresses, phone numbers, and job …
Wesco International Listed by ExfilSquad Ransomware Group
Revenue: $24B DATA SUMMARY: 2.6M~ records containing: customer and employee PII, account and contact data, CRM user profiles, credit and bu…
Microsoft Listed by ExfilSquad Ransomware Group
Revenue: $318B DATA SUMMARY: 8M~ records containing: significant PII, employee and customer contact information, authentication data, passw…
Viavi Solutions Listed by ExfilSquad Ransomware Group
Revenue: $1B DATA SUMMARY: 430K~ records containing: customer and partner contact information, significant PII, and enterprise account iden…
District of Columbia Public Schools Listed by ExfilSquad Ransomware Group
District of Columbia Public Schools (DCPS) is a public school district serving Washington, D.C., USA. It operates as the primary government-…
Analog Devices Listed by ExfilSquad Ransomware Group
Revenue: $12.7B DATA SUMMARY: 570K~ records containing: customer PII and addresses.…
Frontier Airlines Listed by ExfilSquad Ransomware Group
Revenue: $1.5B DATA SUMMARY: 2.4M~ records containing: significant PII, customer support cases, flight and travel information, complaint re…
Police National Legal Database Listed by ExfilSquad Ransomware Group
DATA SUMMARY: 135k law enforcement contact records with first/last name, email, police force area, etc.…
Zenith Bank Plc Listed by ExfilSquad Ransomware Group
Revenue: ₦2.3T DATA SUMMARY: 90M~ records containing: extensive PII, banking relationships, account information, financial data, government…
City of Atlanta Listed by ExfilSquad Ransomware Group
DATA SUMMARY: 3M~ records containing: significant PII, citizen service requests, addresses, municipal case history, and internal case manage…
Allstate Listed by ExfilSquad Ransomware Group
Revenue: $67B DATA SUMMARY: 657K~ records containing: significant PII, recruitment and licensing information, onboarding data, and internal…
Both halves of the chain, cleaned once.
A breach put your credentials in 15.4B+ leaked records. Hackers chain that data to your address on 800+ broker sites. GalaxyWarden closes both halves — see what’s exposed first, then pick the protection that fits.