Leak-site post naming COREBI(NowVertical), captured by ThreatCluster

COREBI(NowVertical)

arcusmedia

Ransomware leak-site victim intelligence

Posted
Jul 14, 2026
Countdown
EST SELL : 5 Days EST LEAK : 7 Days
Country
CA
Industry
Technology

Summary

Written by ThreatCluster from victim profile, leak post, screenshot

arcusmedia claims to have leaked data from COREBI (NowVertical); the leak post is published and shows EST SELL: 5 Days and EST LEAK: 7 Days. The leak’s victim profile identifies domain nowvertical.com and lists Google Cloud, AWS and Azure as platforms, and it includes a named individual, Fyodor Dostoevsky. These statements are presented as the group’s claims, not independently verified facts.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Platforms
Google Cloud AWS Azure
People named
Fyodor Dostoevsky

What was taken

NowVertical is a global data and AI company that transforms data into busin …

Leak-site images (1)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture