ByteToBreach Claims VUMI Group Breach Exposed Policyholder and Staff Data

· Original article ↗

Summary

Threat actor bytetobreach claims it exfiltrated VUMI Group data over six days, affecting about 300,000 policyholders and 25,000+ staff, partners and agents; alleged records include SSNs, passports and W-9s.

Key points

  • The threat actor bytetobreach claims it breached VUMI Group and exfiltrated data over six days.
  • The actor alleges about 300,000 policyholders and more than 25,000 staff, partners and agents were affected.
  • Claimed data includes Social Security numbers, passport scans, W-9 tax forms, insurance policy data and other personal information.
  • The report says the actor provided screenshots and an attack-chain account, but supplies no independent confirmation of the claims.
  • The actor reportedly says the data is being distributed through OwnCloud.

Article Details

Victim Organization
VUMI Group
Incident Type
Alleged targeted data breach involving exploitation, database enumeration, and data exfiltration
Data Types Exposed
  • Social Security numbers
  • Passport scans
  • W-9 tax forms
  • Insurance policy data
  • Personal information (PII)
Affected Records
The actor claims approximately 300,000 policyholders and more than 25,000 staff, partners, and agents were exposed.
Operational Impact
bytetobreach claims data was exfiltrated over six days. The source reports no specific operational disruption.
Ransom Or Extortion
No ransom demand is reported. The actor claims the data is being distributed via OwnCloud and requests contact through Session or Signal.
Claim Status
claimed

Threat Actors

Products

Related Articles