ExfilSquad leak of 13 victim archives
Data Leak
Summary
Hide ▲
Show ▼
ExfilSquad published victim data from 13 organizations on August 7, turning claimed exfiltration into a public leak and increasing privacy and extortion risk. The released archive was reported at 382.64 GB and 27 million records, with one DCPS set including 60,000 records. Leaked material included student names, dates of birth, and unique student identifiers, creating direct exposure for affected individuals. Review of public samples tied the leak to Microsoft D365 CRM and ERP access through misconfigured Power Page portals with public read access.
Related Happenings
Police National Legal Database dark-web contact data leak
Data Leak
H score34
First: 03.08.2026 12:13
Last: 03.08.2026 12:13
Sources 1
About this happening:
The Police National Legal Database (PNLD) confirmed that contact information for police, government and customer users was published on the dark web, exposing names an...
Police National Legal Database dark-web contact data leak
Data LeakAbout this happening: The Police National Legal Database (PNLD) confirmed that contact information for police, government and customer users was published on the dark web, exposing names an...
Unnamed organization stolen data published on DLS
Data Leak
H score35
First: 06.05.2026 16:00
Last: 06.05.2026 16:00
Sources 1
About this happening:
Stolen data from an unnamed organization was later posted on a data leak site (DLS), confirming exposure and increasing extortion pressure. The publication followed an...
Unnamed organization stolen data published on DLS
Data LeakAbout this happening: Stolen data from an unnamed organization was later posted on a data leak site (DLS), confirming exposure and increasing extortion pressure. The publication followed an...
Timeline
-
14.08.2026 17:49 1 articles · 1h ago
ExfilSquad claims data from 15 organizations
Initial DisclosureExfilSquad first emerged on July 26 and claimed to have exfiltrated data from 15 separate organizations across government, education, financial services, and manufacturing.
Show sources
- Researchers Confirm ExfilSquad’s Access to Sensitive Data Across 13 Organizations — www.infosecurity-magazine.com — 14.08.2026 17:49
-
14.08.2026 17:49 2 articles · 1h ago
ExfilSquad publishes 13 victim data dumps via torrents
Victim Impact UpdateOn August 7, ExfilSquad published data dumps for 13 victims via torrents and said the organizations did not meet the agreements. The released archive was reported at 382.64 GB and 27 million records across the 13 victims, and the DCPS leak included a censored release with 60,000 records containing student names, dates of birth, and unique student identifiers.
Show sources
- Researchers Confirm ExfilSquad’s Access to Sensitive Data Across 13 Organizations — www.infosecurity-magazine.com — 14.08.2026 17:49
- Researchers Confirm ExfilSquad’s Access to Sensitive Data Across 13 Organizations — www.infosecurity-magazine.com — 14.08.2026 17:49
-
14.08.2026 17:49 1 articles · 1h ago
Fortra links ExfilSquad leaks to Microsoft Power Pages access
Technical Analysis UpdateFortra Intelligence and Research Experts (FIRE) reviewed public samples and concluded that ExfilSquad most likely obtained data through unauthorized access to Microsoft D365 CRM and ERP instances via misconfigured Microsoft Power Page portals with public read access. The leaked formations were consistent with Microsoft Dataverse exports, and Fortra said automated scanning for exposed Power Pages sites identified over 10,000 potential public instances.
Show sources
- Researchers Confirm ExfilSquad’s Access to Sensitive Data Across 13 Organizations — www.infosecurity-magazine.com — 14.08.2026 17:49