ShadowByt3$ Claims A-Plus Software Breach via SQL Injection
Summary
ShadowByt3$ claims it accessed A-Plus Software Limited via SQL injection and downloaded backend and website data. The ransomware.live post says the claim is unconfirmed.
Key points
- The ransomware.live record attributes an unverified breach claim to ShadowByt3$.
- The group claims it gained access through SQL injection on August 18, 2026.
- The claimed data includes 10 internal accounts, SHA-1 password hashes, account metadata, and public website content.
- The post says the dataset contained 211 records totaling about 2.66 MB.
Article Details
- Victim
- A-Plus Software Limited
- Attack Date
- 2026-08-18
- Claim Date
- 2026-08-25
- Encryption Status
- Unknown
- Exfiltration Status
- Claimed
- Exfiltrated Data
- The group claimed it downloaded backend and website content, including administrative user data with SHA-1 password hashes, internal account metadata, product and marketing content, historical corporate announcements, and news category tags. The source says the dataset contained 211 records. The claim is unconfirmed.
- Exfiltrated Size
- 2,787,292 bytes (2.6582 MB), uncompressed, according to the source
- Ransom Demand
- Not disclosed
- Leak Status
- A public claim was posted; publication or authenticity of the stolen data is not confirmed.