ShadowByt3$ Claims to Have Locked Out HandyTrac Greystar AZ
Summary
ShadowByt3$ claims it locked out HandyTrac Greystar AZ, possesses sensitive business and employee data, and is extending negotiations to September 22. The monitoring post says the claims are unconfirmed.
Key points
- The ransomware claim was listed as discovered and published on September 16, 2026.
- ShadowByt3$ claims management and staff were locked out and negotiations extended until September 22, 2026, at 3:00 p.m.
- The actor claims possession of key maps, property intelligence, vulnerability logs, employee identity and credential data, and financial and vendor records.
- The claim also alleges disabled access-related systems and loss of website logins, and cites images and links as proof of lockout.
- The monitoring post says it cannot confirm the claims and invites an official statement from the affected organization.
Article Details
- Victim
- HandyTrac Greystar AZ WARNING
- Claim Date
- 2026-09-16
- Encryption Status
- Unknown; the post claims systems and access were disabled or deleted but does not confirm encryption.
- Exfiltration Status
- Unverified; the attackers claim to possess sensitive data, but exfiltration is not confirmed.
- Exfiltrated Data
- The attackers claim to possess physical-to-digital key maps, property intelligence and vulnerability logs, employee identity and credential data, and financial and vendor records.
- Leak Status
- A ransomware-group claim was posted; publication of victim data is not reported.