daily cyber × ai intelligence

← threat actors

threat actor

ExfilSquad

2 stories · 1 in the wild · July 30, 2026 – August 11, 2026

evidence: 1 observed · 1 claimed

sectors

  • education 2 · Aug 11

geography

  • united kingdom 2 · Aug 11

techniques

  • data exfiltration 1 · Jul 30

attack phases seen

  • Exfiltration 1 · Jul 30

what we reported, newest first, grouped by story

August 11, 2026

  • Newcastle University confirmed a configuration-related breach after ExfilSquad claimed 440,000 records, exposing contact details with no evidence yet of broader compromise (CyberInsider). · Aug 11 · claimed · Breaches & Data Exposure

July 30, 2026

  • New extortion crew ExfilSquad's UK Department for Education claim appears legitimate, even as researchers judge its Microsoft claim more likely fabricated — a 4,000-row sample of Dataverse OData records lent credibility to at least part of the batch. The Independent, IntCyberDigest · Jul 30 · observed · Data Breaches & Extortion