Everest Claims Ransomware Attack on Evaluate, a Norstella Company
Summary
Everest allegedly claimed an attack on Evaluate, a Norstella company, involving encrypted systems and a ransom demand. The monitoring post says the claim is unconfirmed.
Key points
- The post identifies Evaluate, a Norstella company, as the alleged victim and Everest as the threat actor.
- The claim reportedly involves encrypted critical systems and a ransom demand.
- The post attributes the claim to Everest's leak-site listing and ransomware.live monitoring.
- The publisher says it cannot confirm the claim's accuracy; no data exfiltration or operational impact is established.
Article Details
- Victim
- Evaluate (a Norstella company)
- Victim Domain
- Not disclosed
- Claim Date
- 2026-03-15
- Encryption Status
- The ransomware group's claim alleges that critical systems were encrypted; the publisher states it cannot confirm the claim.
- Encrypted Size
- Not disclosed
- Exfiltration Status
- Unconfirmed; potential data exfiltration is being evaluated.
- Exfiltrated Data
- No specific data is identified; the publisher says investigators are evaluating potential exfiltration.
- Exfiltrated Size
- Not disclosed
- Ransom Demand
- A ransom was reportedly demanded in exchange for decryption; no amount is disclosed.
- Leak Status
- Not disclosed