ExfilSquad: A New “Data extortion group” Player Claiming High-Profile Breaches Across the US, UK, and Beyond
Brief
August 6, 2026
Overview
ExfilSquad is a newly emerged threat actor in the cybercriminal landscape, claiming responsibility for alleged breaches of 15 high-profile victims across multiple countries as of the time of writing this report. The alleged victims span the United States (9 victims), the United Kingdom (3 victims), Sweden (1 victim), and Nigeria (1 victim).
The group maintains a dedicated onion-based Data Leak Site (DLS) where victims are listed alongside ransom deadlines, claimed breach sizes, revenue figures, country of origin, and sample files in . 7z format or torrent links as proof of compromise (POC).
Notably, all listed victims share an identical ransom payment deadline of 05.
- 2026 , suggesting a coordinated and simultaneous extortion campaign rather than a series of independent intrusions.