ExfilSquad
Also known as: exfilsquadFirst seen July 26, 2026Active15 claimed victims
The claims below are reproduced as posted by ExfilSquad on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
Only exfiltration
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| UK Department for Education | July 26, 2026 | ransomware_live | — |
| Police National Legal Database | July 26, 2026 | ransomware_live | — |
| Microsoft | July 26, 2026 | ransomware_live | reported in press coverage |
| Allstate | July 26, 2026 | ransomware_live | — |
| TaylorMade & Sun Day Red golf | July 26, 2026 | ransomware_live | — |
| Frontier Airlines | July 26, 2026 | ransomware_live | — |
| Zenith Bank Plc | July 26, 2026 | ransomware_live | — |
| District of Columbia Public Schools | July 26, 2026 | ransomware_live | — |
| Newcastle University | July 26, 2026 | ransomware_live | — |
| Viavi Solutions | July 26, 2026 | ransomware_live | — |
| City of Houston | July 26, 2026 | ransomware_live | — |
| City of Atlanta | July 26, 2026 | ransomware_live | — |
| Bonava | July 26, 2026 | ransomware_live | — |
| Analog Devices | July 26, 2026 | ransomware_live | — |
| Wesco International | July 26, 2026 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).