BYOD Claims Theft of 700GB of Franklin Empire Data, Including Credentials and Customer PII

Summary
BYOD claims it stole more than 700GB of Franklin Empire data, including cloud and API keys, SMTP credentials, customer PII, and business records. The claims are unverified.
Key points
- The BYOD ransomware group claims it accessed and exfiltrated more than 700GB of Franklin Empire data.
- The alleged stolen information includes AWS bucket keys, Moonshot AI API keys, and SMTP credentials.
- The group also claims to have taken customer PII, invoices, PDFs, packaging slips, business information, and inventory data.
- BYOD threatens to post the data on the dark web and demands contact through methods listed on its site.
- The report says credentials were rotated quickly, but the claims have not been confirmed by Franklin Empire. It invites an official statement from the company.
Article Details
- Victim
- Franklin Empire
- Claim Date
- 2026-10-04
- Encryption Status
- Unknown; no encryption is reported.
- Exfiltration Status
- Claimed by BYOD; the source states that over 700GB was accessed and data was exfiltrated, but the claim is unconfirmed.
- Exfiltrated Data
- The claim describes AWS bucket keys, Moonshot AI API keys, SMTP credentials, customer PII, invoices, PDFs, packaging slips, business and inventory information.
- Exfiltrated Size
- Over 700GB (claimed; unconfirmed).
- Ransom Demand
- BYOD demanded contact through methods listed on its site and threatened further consequences if no communication was established; no monetary amount is reported.
- Leak Status
- BYOD threatened to post the data on the dark web; actual publication is not confirmed.
