ShadowByt3$ Claims HandyTrac Data Theft and Threatens Leak

Summary
Ransomware group ShadowByt3$ claims it obtained sensitive HandyTrac data and demands negotiation within 72 hours to prevent a leak. The post says the claims are unverified.
Key points
- The ransomware.live record names HandyTrac, associated with Greystar Litchfield Park, Arizona, as the alleged victim.
- ShadowByt3$ is identified as the actor; the post attributes the claims to the group and says they are unconfirmed.
- The group claims access to key-control maps, property intelligence and vulnerability logs, employee identity and credential data, financial records, and an administrative portal.
- The post says negotiation is demanded within 72 hours to prevent data leakage.
- The record lists September 15, 2026, as the discovery and publication date.
Article Details
- Victim
- HandyTrac (Greystar Litchfield Park, AZ)
- Claim Date
- 2026-09-15
- Encryption Status
- Unknown; the source does not report encryption.
- Exfiltration Status
- Unverified group claim; the post says access to sensitive data was obtained but does not confirm exfiltration.
- Exfiltrated Data
- The group claimed access to physical-to-digital key maps, property intelligence and vulnerability logs, employee identity and credential data, financial and vendor records, and administrative portal control.
- Ransom Demand
- Negotiation was demanded within 72 hours to prevent data leakage; no amount was stated.
- Leak Status
- The group threatened data leakage; the source does not report that data was published.
