ExfilSquad
Data as of August 16, 2026.
What industries ExfilSquad targets
Sector identified for 13 of 15 victims.
| Education | 3 | |
| Manufacturing | 3 | |
| Financial Services | 2 | |
| Government | 2 | |
| Construction | 1 | |
| Logistics | 1 | |
| Technology | 1 |
Where the victims are located
Country identified for all 15 victims.
| United States | 10 | |
| United Kingdom | 3 | |
| Sweden | 1 | |
| Nigeria | 1 |
Every ExfilSquad victim
| Victim | Sector | Country | Posted |
|---|---|---|---|
| Wesco International wesco.com | Manufacturing | United States | Jul 31, 2026 |
| Allstate allstate.com | Financial Services | United States | Jul 27, 2026 |
| Analog Devices analog.com | Not identified | United States | Jul 27, 2026 |
| City of Atlanta atlantaga.gov | Government | United States | Jul 27, 2026 |
| Bonava bonava.com | Construction | Sweden | Jul 27, 2026 |
| DC Public Schools dc.gov | Education | United States | Jul 27, 2026 |
| Department for Education education.gov.uk | Education | United Kingdom | Jul 27, 2026 |
| Frontier Airlines flyfrontier.com | Logistics | United States | Jul 27, 2026 |
| City of Houston houstontx.gov | Government | United States | Jul 27, 2026 |
| Microsoft microsoft.com | Technology | United States | Jul 27, 2026 |
| Newcastle University ncl.ac.uk | Education | United Kingdom | Jul 27, 2026 |
| Police National Legal Database pnld.co.uk | Not identified | United Kingdom | Jul 27, 2026 |
| TaylorMade Golf taylormadegolf.com | Manufacturing | United States | Jul 27, 2026 |
| VIAVI Solutions viavisolutions.com | Manufacturing | United States | Jul 27, 2026 |
| Zenith Bank zenithbank.com | Financial Services | Nigeria | Jul 27, 2026 |
Browse recent data breaches for more.
ExfilSquad leak site
The address we've seen ExfilSquad publish victims from. Any .onion address needs the Tor Browser.
exfil5gqmbxrg6yky5aeitkdj7kfwxxjh3wxzrtlewjqi2x67o634iyd.onion
ExfilSquad questions
Is ExfilSquad still active?
Yes. ExfilSquad posted its most recent victim on July 31, 2026. That's 15 victims in the last 30 days.
How many victims has ExfilSquad claimed?
ExfilSquad has named 15 victims on its leak site since we started tracking it. That counts organizations, not leaked files. A single victim often accounts for thousands of published files.
When did ExfilSquad first appear?
The first victim we recorded for ExfilSquad was posted on July 27, 2026. That's when the group entered our collection, which isn't necessarily when it started operating.
Which sectors does ExfilSquad target?
Education accounts for the most victims we can classify, with 3. Manufacturing follows at 3. We could identify a sector for 13 of 15 victims, so treat this as the shape of the targeting rather than a full census.
Has ExfilSquad already got your credentials?
Check whether your employees' logins have leaked on the dark web before they're exploited.
Check your exposure →Continuous dark web monitoring alerts you when your company's data shows up, whether that's employee credentials or files published after an attack.