ExfilSquad Hackers Leak 382GB of Microsoft D365 Data From 13 Victims
Brief
A new data-extortion group known as ExfilSquad has leaked 382.64GB of data allegedly stolen from 13 organizations using Microsoft Dynamics 365 CRM and ERP environments.
The released archive reportedly contains around 27 million records, including personally identifiable information, customer support data, internal business records, and account-related details.
Security researchers at Fortra said the group first appeared on July 26, 2026, when it claimed to have obtained data from 15 organizations.
The claims initially lacked evidence, but ExfilSquad later published samples and then released larger data archives through torrents after an August 5 deadline passed. On August 7, the group published data linked to 13 alleged victims.
The campaign is notable because current evidence does not point to a Microsoft Dynamics 365 software vulnerability or a traditional ransomware intrusion.