Rhysida Claims 268 GB of Skaff Group Data

Summary
Rhysida claims to have exposed 139,377 Skaff Group files totaling about 268 GB, including HR, banking, payroll, employee photo, and commercial records. The claims are unconfirmed.
Key points
- The claim names Skaff Group as the victim and Rhysida as the actor.
- The group claims 139,377 files, totaling approximately 268 GB, were exposed.
- Reported data includes HR records, Lebanese ID scans, a director’s passport, and civil-status extracts.
- The alleged exposure includes banking and payroll information, as well as employees’ private family photo archives.
- Commercial documents, including customs and export paperwork, were also reportedly affected.
- The post attributes its information to the group’s leak-site claim and says it cannot confirm its accuracy.
Article Details
- Victim
- Skaff Group
- Claim Date
- 2026-10-03
- Encryption Status
- The article reports that Rhysida claimed the incident involved encrypting files; this is unverified and not victim-confirmed.
- Encrypted Size
- Approximately 268 GB; the article attributes this figure to the ransomware group's claim.
- Exfiltration Status
- The group reportedly claimed files were exposed; exfiltration is unverified.
- Exfiltrated Data
- Reportedly exposed data included HR dossiers and identity documents, banking and payroll information, employee photo archives, and commercial documents.
- Exfiltrated Size
- 139,377 files, according to the article's account of the group's claim.
- Ransom Demand
- Not disclosed
- Leak Status
- A group claim was listed on the Rhysida leak site; the article states it cannot confirm the information's accuracy.
