Everest’s Ransomware Claim Names Morae, Alleges Disruption and Possible Data Exfiltration

Summary
A ransomware.live listing names Morae as a target of an Everest claim alleging disruption and possible data exfiltration. It says Morae is assessing the incident and responding; the claims are unconfirmed.
Key points
- Ransomware.live lists Morae, a US-based professional services firm, in an Everest ransomware claim.
- The claim alleges operational disruption and possible data exfiltration; the post says it is based on public claims and is unconfirmed.
- The listing says Morae is assessing the incident’s scope, coordinating with clients, regulators, and law enforcement, and remediating across its US operations.
Article Details
- Victim
- Morae
- Claim Date
- 2026-04-30
- Encryption Status
- Unknown; not reported.
- Exfiltration Status
- Potential exfiltration alleged; unverified.
- Exfiltrated Data
- Specific data not disclosed.
- Ransom Demand
- Unknown; not reported.
- Leak Status
- A claim about Morae was posted on Everest's site; data publication and authenticity are not confirmed.
