Everest Claims Ransomware Attack on Mexico’s Grupo DT

Summary
Ransomware[.]live lists Mexico-based Grupo DT as a victim of Everest, which allegedly claimed the incident on Aug. 20, 2026. The post says encryption and extortion were involved; the claim is unconfirmed.
Key points
- Ransomware[.]live names Mexico-based Grupo DT as the victim and Everest as the ransomware actor.
- The record cites an Everest leak-site post about Grupo DT, published Aug. 20, 2026.
- The post describes encryption and extortion demands, but these are claims attributed to Everest.
- The article also reports unauthorized access and system disruption without independent confirmation.
- The post says it cannot confirm the claim’s accuracy and invites an official statement from Grupo DT.
Article Details
- Victim
- Grupo DT
- Victim Domain
- Not disclosed
- Encryption Status
- Encryption is reported as part of the incident, but this is based on the ransomware group's unconfirmed public claims.
- Exfiltration Status
- Unknown
- Exfiltrated Data
- Unknown
- Exfiltrated Size
- Unknown
- Ransom Demand
- The report says the incident is associated with extortion demands, based on unconfirmed public claims; no amount is provided.
- Leak Status
- The report cites an Everest group page as the source of its claim; publication or leakage of victim data is not stated or confirmed.
