Everest Ransomware Group Claims Breaches of Six Organizations, Alleging 380 GB of Data
Summary
The Everest ransomware group claims its extortion portal lists six organizations and more than 380 GB of data, including banking records, personal identifiers, payment details and aviation files; the claims are unverified.
Key points
- The article attributes the claims to the Everest ransomware group and its extortion portal; it does not independently confirm the alleged breaches.
- Named organizations include Frost Bank, Citizens Bank, Tokoparts, Complete Aircraft Group, Umiles Group and Nutrabio.
- The group alleges the data totals more than 380 GB and includes over 250,000 SSNs/TINs and about 3.4 million banking records.
- Other allegedly exposed material includes credit card details, corporate financial records, aviation maintenance files, personal identity documents and email archives.
- The article says the portal has countdown timers for public release.
Article Details
- Victim
- Frost Bank, Citizens Bank, Tokoparts, Complete Aircraft Group, Umiles Group, and Nutrabio (alleged victims named by Everest)
- Encryption Status
- Unknown; the source does not report whether victim systems or data were encrypted.
- Exfiltration Status
- Claimed by Everest; the source reports that the group says it obtained and posted data troves, but the claims are not independently confirmed.
- Exfiltrated Data
- The group reportedly claims the data includes SSNs/TINs, banking records, unencrypted credit card details, corporate financial records, aviation maintenance files, personal identification documents, customer and commercial records, and corporate email archives.
- Exfiltrated Size
- Over 380 GB, according to the group's claim.
- Leak Status
- The group reportedly posted data troves on its extortion portal with countdowns to public release; public release and data authenticity are not confirmed.
Threat Actors
Countries
Industries
AutomotiveEverest ransomware group claims to have breached multiple organizations across the financial, aviation, automotive, and retail sectors and has posted large troves of highly sensitive corporate and customer data on itsAviationThe Everest ransomware group claims to have breached multiple organizations across the financial, aviation, automotive, and retail sectors and has posted large troves of highly sensitive corporate and customer data onRetailgroup claims to have breached multiple organizations across the financial, aviation, automotive, and retail sectors and has posted large troves of highly sensitive corporate and customer data on its extortion