ExfilSquad Targets New Victims, Shares Data via Torrents
Brief
ExfilSquad targets 13 organizations, exploiting cloud portals for data theft and using torrents to spread stolen information and amplify damage.
Resecurity is tracking the activity of ExfilSquad – the group announced new victims this week. ExfilSquad is a new cybercrime group that emerged in mid-2026. Instead of using ransomware, it steals data and threatens to publish it on a dark web leak site unless victims pay a ransom.
The list includes 13 organizations from the U. S. , the UK, and Sweden. Notably, in July, the group also targeted a major financial institution in Nigeria.
“ExfilSquad announced new victims this week and set a firm deadline – August 5, 2026 – to complete all required negotiations. Otherwise, the stolen data will be released. This time, the list of victims includes 13 organizations from the U. S. , the UK, and Sweden.” reads the report published by Resecurity.