Skip to content
Leak-site post naming Conway Analytics, captured by ThreatCluster

Conway Analytics

everest

Ransomware leak-site victim intelligence

Data size
40 TB DataBase
Files
78,077
Views
68,000
Posted
Aug 5, 2026
Countdown
The files will be published after the timer counts down.
Country
US
Industry
Technology

Summary

Written by ThreatClusterfrom site fields, file listing, victim profile, leak post, screenshot

Everest group claims to have exfiltrated about 40 TB of data from Conway Analytics, comprising roughly 78,077 file and path entries. The data categories claimed include database backups, cloud billing records, AWS deployment packages, research environments, AI/ML models, article-processing data, advisory and consulting project archives, legacy corporate archives, Site Selection Magazine backups, production materials and event archives. The leak page names conwayanalytics.com and shows a publication status of published with a countdown before release, indicating the company still has time to contact the group.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Platforms
AWS AWS Lambda CommonSpot

What was taken

The dataset represents the corporate technology, database, operational, advisory and archival data environment of conwayanalytics.com and associated Conway Analytics, Conway Advisory, ICA Legacy and Site Selection Magazine operations.

Data categories
SQL/database backupscloud billing recordsAWS deployment packagesresearch application environmentsAI / machine-learning modelsarticle-processing dataadvisory and consulting project archivesSite Selection Magazine backupsproduction materialsevent archivesinternal migration materialsinvoices and receipts

Ransom note

Published by the group on their leak site, reproduced verbatim.

The files will be published after the timer counts down. The company still has time to get in touch with us

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

Download
https://gofile.io/d/mp1U1h
download_link
https://gofile.io/d/mp1U1h
download_note
The files will be published after the timer counts down.
dataset_scope_excerpt
The dataset represents the corporate technology, database, operational, advisory and archival data environment of conwayanalytics.com and associated Conway Analytics, Conway Advisory, ICA Legacy and Site Selection Magazine operations.

Leak-site images (11)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
onion leak page11 KB
Logo of Keysight Technologies featuring a red waveform graphic and the company name in white text.
onion leak page128 KB
onion leak page11 KB
Logo featuring the text "mansfield" in a stylized font, with "FAMILY DENTISTRY" below it.
onion leak page1.4 KB
Logo featuring a stylized letter "P" in orange with a black play button icon integrated into the design.
onion leak page7.5 KB
onion leak page5.8 KB
Logo featuring the text "Al-Futtaim" in blue, with "automotive" in a smaller font below it, accompanied by a geometric symbol.
onion leak page5.6 KB
The image features a logo with stylized figures in orange and blue, representing people, alongside the text "ALZONE" in blue.
onion leak page7.0 KB
Logo of Emirates Flight Catering, featuring stylized text in gold and red.
onion leak page6.8 KB
Logo of Dharma Group featuring a stylized design with blue and green colors, accompanied by the text "DHARMA GROUP" below it.
onion leak page7.7 KB