ReliaQuest
CompanySecurity timeline
- Named in ransomware reports by Cyber Security NewsRansomware leak-site victim claims rose 30% in Q3, but many may be false
- Activity reported by GBHackersHackers use stolen logins to fake major data breaches and extort companies
Recent news
Ransomware leak-site victim claims rose 30% in Q3, but many may be false
The number of organisations named on ransomware leak sites rose 30% in Q3 2026, and 43 groups that had never posted before drove 93% of the increase. ReliaQuest says the listings mix new attacks, rebrands, recycled data and unsupported claims, and that the ExfilSquad group appears to use limited access, likely from exposed GitHub credentials, to make a minor breach look large. Teams should treat each listing as unverified until their own logs and access records confirm or rule out an intrusion.
Hackers use stolen logins to fake major data breaches and extort companies
Attackers are abusing exposed credentials to access limited corporate data and presenting it as evidence of major breaches to pressure victims into paying. The article notes that authentic leaked records do not automatically prove an extensive network intrusion. The activity concerns external attackers affecting third parties rather than a compromise of ReliaQuest's environment.