Leak-site post naming CCA Bank, captured by ThreatCluster

CCA Bank

everest

Ransomware leak-site victim intelligence

Data size
19.04 GB
Files
11,837
Views
8,100
Posted
Aug 20, 2026
Industry
Banking

Summary

Written by ThreatCluster from file listing, victim profile, leak post, screenshot

Everest claims that CCA Bank’s data repository was exfiltrated, totaling 19.04 GB across 11,837 files, with 17 nested RAR files totaling 120.31 MB that could not be enumerated. They describe the data as spanning core banking operations, lending, portfolio management, finance and treasury, prudential reporting, risk management, AML/KYC compliance, legal and recovery work, internal audit and control, human resources, IT systems and migration, formal bank procedures, product documentation, marketing and corporate communications. The leak post is described as being in countdown status. The material identifies the victim as CCA Bank (cca-bank.com) and lists a named individual, Landry Yongoua.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

People named
LANDRY YONGOUA

What was taken

The CCA Bank data repository contains 11,837 files totaling 18.92 GB, with an additional 17 nested RAR files totaling 120.31 MB that could not be enumerated, bringing the total known data volume to 19.04 GB. Their internal files are not included in the counts below. The dataset is organized around core banking operations, credit and lending, portfolio management, finance and treasury, prudential reporting, risk management, compliance and AML/KYC, legal and recovery work, internal audit and control, human resources, IT systems and migration, formal bank procedures, product documentation, marketing, corporate communication and media.

Data categories
core banking operationscredit and lendingportfolio managementfinance and treasuryprudential reportingrisk managementcompliance and AML/KYClegal and recovery workinternal audit and controlhuman resourcesIT systems and migrationformal bank proceduresproduct documentationmarketingcorporate communication and media
File types seen
csv × 2doc × 415eml × 12jpg × 1,648mp4 × 6pdf × 6,847png × 55txt × 10wav × 2xls × 22docx × 1,430ppsx × 115pptx × 269xlsb × 2xlsm × 10xlsx × 954

Leak-site images (11)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
onion leak page 11 KB
Logo of CCA Bank featuring a purple hexagon with the text "CCA Bank" and a tagline in French about finance in Africa.
onion leak page 7.5 KB
Logo featuring a stylized letter "E" in red and a gray arrow pointing to the right.
onion leak page 6.8 KB
Logo of Kingston Technology featuring a stylized red figure and the brand name in black text.
onion leak page 29 KB
Logo featuring the text "GRUPO DT" and "DESGUACES TENERIFE," accompanied by a stylized car outline in orange.
onion leak page 19 KB
Logo of Capgemini featuring a blue stylized cloud shape above the company name, with the tagline "Consulting. Technology. Outsourcing."
onion leak page 27 KB
Logo of Atlas Air Worldwide, featuring the company name in blue with a yellow globe design above it.
onion leak page 6.7 KB
Logo featuring the text "rx networks" with a stylized design, including a wireless signal icon.
onion leak page 7.3 KB
Logo of Ingersoll Rand featuring the letters "IR" in red with a circular design.
onion leak page 11 KB
Logo of Keysight Technologies featuring a red waveform symbol and the company name in white text.
onion leak page 128 KB