Skip to content
Leak-site post naming Experts Entreprendre, captured by ThreatCluster

Experts Entreprendre

everest

Ransomware leak-site victim intelligence · FR

Data size
1.13 TB
Views
44,000
Posted
Aug 20, 2026
Country
FR
Industry
Professional Services

Summary

Written by ThreatClusterfrom file listing, victim profile, leak post, screenshot, ransom note

The Everest group claims Experts Entreprendre’s data was stolen, including accounting and financial documents, tax records, banking and treasury data, payroll and personnel/employment records, legal and corporate documents, audits and internal controls, litigation materials, identity documents and other personal records, access-related data, certificates and remote connections, and business correspondence and email; the ransom note references around 6,000+ clients. The leak post is published, and the group states they will publish all data if the company does not engage in dialogue, noting that they have started notifying the company’s clients. The leak page identifies the victim as Experts Entreprendre and lists Qtox as a platform.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Platforms
Qtox

What was taken

[AI generated] N/A

Data categories
accounting and financial documentstax recordsbanking, treasury, and financial documentspayroll, personnel, and employment documentslegal and corporate documentsaudit, internal control, and compliance materialslitigation, dispute, and claims materialsidentity documents and other personal recordsaccess-related data, certificates, and remote connectionsbusiness correspondence and email

Ransom note

Published by the group on their leak site, reproduced verbatim.

We are offering one more chance and expect the company to engage in a constructive dialogue; otherwise, all data will be published. ( 6000+ clients )
Contact us Qtox:
99D176DB79C7DB2A708F680C460CA48540230AA103F1EF69A26EBFE29661C933918DE7852521
We have started notifying the company's clients about the data breach.
This is just a small part of the 6,000 clients
The company has time to contact us or all clients will be notified and all data will leak.

Leak-site images (11)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
onion leak page11 KB
Logo featuring a stylized letter "E" in red and a gray arrow pointing to the right.
onion leak page6.8 KB
Logo of Kingston Technology featuring a stylized red figure and the brand name in black text.
onion leak page29 KB
Logo featuring the text "GRUPO DT" and "DESGUACES TENERIFE," accompanied by a stylized car outline in orange.
onion leak page19 KB
Logo of Capgemini featuring a blue stylized cloud shape above the name "Capgemini" with the tagline "Consulting. Technology. Outsourcing."
onion leak page27 KB
Logo of Atlas Air Worldwide featuring the company name in blue with a yellow globe design above it.
onion leak page6.7 KB
Logo featuring the text "rx networks" with a stylized "rx" and a wireless signal icon.
onion leak page7.3 KB
Logo of Ingersoll Rand featuring the letters "IR" in red with a circular design.
onion leak page11 KB
Logo of Keysight Technologies featuring a red waveform graphic and the company name in white text.
onion leak page128 KB
onion leak page11 KB

Negotiation

ongoing
Tox 99D176DB79C7DB2A708F680C460CA48540230AA103F1EF69A26EBFE29661C933918DE7852521