Ransomware group

ExfilSquad ransomware: victims and leak site activity

The ExfilSquad ransomware group has listed 15 victims on its leak site since July 2026; its latest post is from 26 July 2026. Most affected countries: United States, United Kingdom and Nigeria. Most targeted sector: Government & Defense.

Total posts 15
First seen 2026-07-26
Latest post 2026-07-26
Countries hit 4

About ExfilSquad

Only exfiltration

Leak site (Tor)
http://exfil5gqmbxrg6yky5aeitkdj7kfwxxjh3wxzrtlewjqi2x67o634iyd.onion

ExfilSquad victims per year

15 2026

All 15 victims

Search every post in the full table.
Victim Country Sector Discovered
Wesco International United States Manufacturing
Analog Devices United States Technology
Bonava Sweden Manufacturing
City of Atlanta United States Government & Defense
City of Houston United States Government & Defense
Viavi Solutions United States Technology
Newcastle University United Kingdom Education
District of Columbia Public Schools United States Education
Zenith Bank Plc Nigeria Financial Services
Frontier Airlines United States Transportation
TaylorMade & Sun Day Red golf United States Retail & E-Commerce
Allstate United States Financial Services
Microsoft United States Technology
Police National Legal Database United Kingdom Government & Defense
UK Department for Education United Kingdom Government & Defense