ByteToBreach Claims VUMI Group Breach Exposed Policyholder and Staff Data

Summary
Threat actor bytetobreach claims it exfiltrated VUMI Group data over six days, affecting about 300,000 policyholders and 25,000+ staff, partners and agents; alleged records include SSNs, passports and W-9s.
Key points
- The threat actor bytetobreach claims it breached VUMI Group and exfiltrated data over six days.
- The actor alleges about 300,000 policyholders and more than 25,000 staff, partners and agents were affected.
- Claimed data includes Social Security numbers, passport scans, W-9 tax forms, insurance policy data and other personal information.
- The report says the actor provided screenshots and an attack-chain account, but supplies no independent confirmation of the claims.
- The actor reportedly says the data is being distributed through OwnCloud.
Article Details
- Victim Organization
- VUMI Group
- Incident Type
- Alleged targeted data breach involving exploitation, database enumeration, and data exfiltration
- Data Types Exposed
- Social Security numbers
- Passport scans
- W-9 tax forms
- Insurance policy data
- Personal information (PII)
- Affected Records
- The actor claims approximately 300,000 policyholders and more than 25,000 staff, partners, and agents were exposed.
- Operational Impact
- bytetobreach claims data was exfiltrated over six days. The source reports no specific operational disruption.
- Ransom Or Extortion
- No ransom demand is reported. The actor claims the data is being distributed via OwnCloud and requests contact through Session or Signal.
- Claim Status
- claimed
