Skip to content
Leak-site post naming Higginbotham, captured by ThreatCluster

Higginbotham

n0n

Ransomware leak-site victim intelligence

Posted
Nov 7, 2026
Country
US
Industry
Professional Services

What was taken

insurance brokerage · United States | The complete correspondence attachment store of a large independent insurance brokerage: over 217,000 client policy and working documents from 2013 through 2026, including workers compensation and property policies of named clients; Client policy and underwriting records: carrier underwriting questionnaires, producer reports with client codes, names and policy numbers, and producer email with commission, prospect and benefits data; Client reference rosters n

Leak-site images (1)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture