[RHYSIDA] – Ransomware Victim: Rug & Home

Verification alert Listings attributed to RHYSIDA have been reported as including unverified or fabricated victim claims. Treat this post as unconfirmed until corroborated with independent evidence. See further information here: BankInfoSecurity

See further information here: BankInfoSecurity

NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating to the content should be directed at the attackers, not RedPacket Security. This blog is an editorial notice informing that a company has fallen victim to a ransomware attack. RedPacket Security is not affiliated with any ransomware threat actors or groups and will not host infringing content. The information on this page is automated and redacted whilst being scraped directly from the RHYSIDA Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

On September 7, 2026, the U.S.-based retail and e-commerce company Rug & was listed by the Rhysida ransomware group in an apparent data-leak claim. No separate compromise date is provided, so September 7, 2026, should be treated as the post date. The post describes Rug & as a retailer specializing in rugs, furniture, and décor, and alleges that the attackers obtained access to a broad range of corporate and customer information. The available details indicate a data-exfiltration incident; there is no explicit claim that Rug & ’s systems were encrypted. According to the post, the allegedly stolen material includes records relating to approximately 50,193 customers, delivery documentation, plaintext credentials for 60 business-to-business supplier portals, employee and contractor tax records containing Social Security numbers, a company-wide payroll database, banking and direct-deposit information, and human-resources files such as background checks, termination records, workplace-injury documentation, and retirement-plan information. The claim also references purchase-related data and additional unspecified material. No ransom amount is provided, and the post does not state that files are available for download. The page contains no screenshots or other images, and no specific evidence files are described.

On September 7, 2026, the U.S.-based retail and e-commerce company Rug & was listed by the Rhysida ransomware group in an apparent data-leak claim. No separate compromise date is provided, so September 7, 2026, should be treated as the post date. The post describes Rug & as a retailer specializing in rugs, furniture, and décor, and alleges that the attackers obtained access to a broad range of corporate and customer information. The available details indicate a data-exfiltration incident; there is no explicit claim that Rug & ’s systems were encrypted.

According to the post, the allegedly stolen material includes records relating to approximately 50,193 customers, delivery documentation, plaintext credentials for 60 business-to-business supplier portals, employee and contractor tax records containing Social Security numbers, a company-wide payroll database, banking and direct-deposit information, and human-resources files such as background checks, termination records, workplace-injury documentation, and retirement-plan information. The claim also references purchase-related data and additional unspecified material. No ransom amount is provided, and the post does not state that files are available for download. The page contains no screenshots or other images, and no specific evidence files are described.

A considerable amount of time and effort goes into maintaining this website, creating backend automation and creating new features and content for you to make actionable intelligence decisions. Everyone that supports the site helps enable new functionality.

If you like the site, please support us on Patreon or Buy Me A Coffee using the buttons below.