Skip to content
Leak-site post naming Hayward Holdings, captured by ThreatCluster

Hayward Holdings

falcon

Ransomware leak-site victim intelligence

Data size
561 GB compressed · 848 GB uncompressed
Posted
Aug 31, 2026
Country
US
Industry
Pool & spa equipment

Summary

Written by ThreatClusterfrom victim profile, leak post

Falcon's leak post claims 561 GB compressed (848 GB uncompressed) of Hayward Holdings' data. The leak page describes the data as related to pool and spa equipment. The leak post is published.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Platforms
Salesforce

What was taken

Pool & spa equipment

Data categories
PIIfinancial recordsP&L statementsaccounting ledgerspersonnel filesIT infrastructure blueprintsprivileged account credentialsboard preparation materials
File types seen
7z × 1
Sample files (1)
Hayward.7z

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

download_link
http://i7loab6thvz4lb7jdr3qoeumbvilwhbgnwsctnlfmvsv7g5s3vsiw6yd.onion/downloads/Hayward.7z
561 GB compressed
561 GB compressed

Leak-site images (1)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture

Negotiation

non-cooperation