ExfilSquad

Active
Only exfiltration
15 Victims
Jul 26, 2026 First Discovered
Jul 26, 2026 Last Discovered
6 Days Inactive
78.6% Infostealer
1/1 Sites Online
Top Countries
US 10
GB 3
SE 1
NG 1
Top Sectors
Government & Defense 4
Technology 3
Manufacturing 2
Education 2
Financial Services 2
Transportation 1
Retail & E-Commerce 1
Known Locations (1)
ExfilSquad
exfil5gqmbxrg6yky5aeitkdj7kfwxxjh3wxzrtlewjqi2x67o634iyd.onion
Victims (15)
Wesco International
US Manufacturing Discovered: Jul 26, 2026 · Attack est.: Jul 26, 2026
Revenue: $24B DATA SUMMARY: 2.6M~ records containing: customer and employee PII, account and contact data, CRM user profiles, credit and business identifiers, authentication metadata, and access information.
Bonava
SE Manufacturing Discovered: Jul 26, 2026 · Attack est.: Jul 26, 2026
Revenue: SEK 8B DATA SUMMARY: 842K~ records containing: significant PII, property ownership/interests, warranty and repair cases, contractor information, marketing preferences, and customer service history.
City of Atlanta
US Government & Defense Discovered: Jul 26, 2026 · Attack est.: Jul 26, 2026
DATA SUMMARY: 3M~ records containing: significant PII, citizen service requests, addresses, municipal case history, and internal case management data.
City of Houston
US Government & Defense Discovered: Jul 26, 2026 · Attack est.: Jul 26, 2026
DATA SUMMARY: 6M~ records containing: significant PII, resident contact details, service requests, complaint descriptions, addresses, location data, case/ticket metadata, department routing, service status, resolution information, and extensive CRM metadata.
Viavi Solutions
US Technology Discovered: Jul 26, 2026 · Attack est.: Jul 26, 2026
Revenue: $1B DATA SUMMARY: 430K~ records containing: customer and partner contact information, significant PII, and enterprise account identifiers.
Newcastle University
GB Education Discovered: Jul 26, 2026 · Attack est.: Jul 26, 2026
DATA SUMMARY: 440K~ records containing: applicant and student contact information, significant PII, and admissions data.
District of Columbia Public Schools
US Education Discovered: Jul 26, 2026 · Attack est.: Jul 26, 2026
[AI generated] District of Columbia Public Schools (DCPS) is a public school district serving Washington, D.C., USA. It operates as the primary government-run K-12 educational system for the nation's capital,...
Zenith Bank Plc
NG Financial Services Discovered: Jul 26, 2026 · Attack est.: Jul 26, 2026
Revenue: ₦2.3T DATA SUMMARY: 90M~ records containing: extensive PII, banking relationships, account information, financial data, government identifiers, customer contact information, and banking support cases.
Frontier Airlines
US Transportation Discovered: Jul 26, 2026 · Attack est.: Jul 26, 2026
Revenue: $1.5B DATA SUMMARY: 2.4M~ records containing: significant PII, customer support cases, flight and travel information, complaint records, baggage details, and customer support email communications.
TaylorMade & Sun Day Red golf
US Retail & E-Commerce Discovered: Jul 26, 2026 · Attack est.: Jul 26, 2026
Revenue: $1.5B DATA SUMMARY: 2M~ records containing: significant PII, customer support history, orders, shipping information, business account data, financial/account information, internal notes, attachments, and AI support chat transcripts.
Allstate
US Financial Services Discovered: Jul 26, 2026 · Attack est.: Jul 26, 2026
Revenue: $67B DATA SUMMARY: 657K~ records containing: significant PII, recruitment and licensing information, onboarding data, and internal employee account information.
Microsoft
US Technology Discovered: Jul 26, 2026 · Attack est.: Jul 26, 2026
Revenue: $318B DATA SUMMARY: 8M~ records containing: significant PII, employee and customer contact information, authentication data, password hashes, portal identities, corporate account information, business leads, facilities management records, internal service...
Police National Legal Database
GB Government & Defense Discovered: Jul 26, 2026 · Attack est.: Jul 26, 2026
DATA SUMMARY: 135k law enforcement contact records with first/last name, email, police force area, etc.
UK Department for Education
GB Government & Defense Discovered: Jul 26, 2026 · Attack est.: Jul 26, 2026
DATA SUMMARY: Help Portal (~600K records) – Parent and staff contact records containing full names, email addresses, phone numbers, and job titles. Turing Portal (~7K records) – Contact records containing...
Analog Devices
US Technology Discovered: Jul 26, 2026 · Attack est.: Jun 22, 2026
Revenue: $12.7B DATA SUMMARY: 570K~ records containing: customer PII and addresses.