Skip to content
Leak-site post naming Better Accounting Solutions, captured by ThreatCluster

Better Accounting Solutions

anubis

Ransomware leak-site victim intelligence · EN

Data size
159 GB
Posted
Sep 14, 2026
Industry
Finance

Summary

Written by ThreatClusterfrom site fields, file listing, victim profile, leak post, screenshot, our reporting

Anubis states that Better Accounting Solutions' data was exposed, with 159 GB claimed stolen, including reports on incoming transactions and other movements of funds, information on the overall balances of businesses and individuals, and bank account credentials, including an unprotected Excel spreadsheet. The leak page identifies the victim as Better Accounting Solutions (domain betteraccountingsolutions.com) in the accounting services sector. The leak post is published.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Domains
https://www.betteraccountingsolutions.com/
Platforms
Google Sheets

What was taken

Wall Street accountants data breach.

Data categories
reports on incoming transactions and other movements of fundsinformation on the overall balances of both businesses and individuals

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

an Excel spreadsheet that, by the way, is not even password-protected.
Excel spreadsheet containing clients' bank account credentials; not password-protected.

Leak-site images (11)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
Screenshot of a balance sheet for Three Bows LLC, detailing assets and liabilities as of November 30, 2021, with a watermark.
onion leak page171 KB
Screenshot of a profit and loss statement for Three Bows LLC, detailing income, costs, and expenses for January to November 2021.
onion leak page216 KB
Screenshot of a spreadsheet listing accounts with columns for Account, Trans Date, Amount, Order Status, and Order ID.
onion leak page636 KB
Screenshot of a bank statement with sections for account summary, interest summary, and transaction history, marked with a watermark.
onion leak page221 KB
Screenshot of a bank statement with sections for account summary, interest summary, and transaction history, marked with a watermark.
onion leak page221 KB
Screenshot of a credit card statement showing account details, balance, payment due, and membership rewards points.
onion leak page289 KB
Screenshot of a spreadsheet containing financial data with columns for Date, Amount, and various financial summaries.
onion leak page674 KB
Screenshot of a spreadsheet listing names, addresses, bank details, salaries, and commissions, with a watermark overlay.
onion leak page462 KB
Screenshot of a spreadsheet containing bank account details, usernames, passwords, and email addresses, with some information highlighted in yellow.
onion leak page271 KB
Screenshot of a spreadsheet containing login credentials for various accounts, including usernames and passwords, with some data highlighted.
onion leak page298 KB