Rhysida Claims to Have Stolen Sensitive Data from Rug & Home
Summary
A Rhysida ransomware-group claim lists customer, employee, supplier, financial, and HR data allegedly taken from Rug & Home. The post says the claims have not been verified.
Key points
- The monitoring post attributes the claim to the Rhysida ransomware group and lists Rug & Home, a US retail and e-commerce company, as the victim.
- The post says the claimed data includes records for 50,193 customers, with names, addresses, contact details, and purchase amounts.
- Other listed data includes delivery-note scans, plaintext passwords for about 10,800 supplier portals, and employee and contractor tax forms containing SSNs.
- The claim also lists payroll, bank and direct-deposit details, HR records, and other internal documents.
- The post states that it cannot confirm the information’s accuracy.
Article Details
- Victim
- Rug & Home
- Claim Date
- 2026-09-07
- Encryption Status
- Unknown
- Exfiltration Status
- Claimed by rhysida; not independently confirmed
- Exfiltrated Data
- The group’s listing claims the data includes customer records, signed delivery-note scans, supplier-portal passwords, tax forms, payroll and bank details, HR records, and other internal documents. The source does not confirm the claim or the authenticity of the data.
- Leak Status
- Listed on rhysida’s leak site; the source says the claims are unverified.