Microsoft

exfilsquad

Ransomware leak-site victim intelligence

Data size
130 GB UNCOMPRESSED
Posted
Jul 26, 2026
Country
US
Industry
Technology

Summary

Written by ThreatCluster from file listing, victim profile, leak post, our reporting

Exfilsquad claims to have stolen about 130 GB uncompressed from Microsoft, comprising around 8 million records that include significant PII, employee and customer contact information, authentication data, password hashes, portal identities, corporate account information, business leads, facilities management records, and access permissions. Sample filename published: microsoft_exfilsquad.7zd0. The leak page lists Microsoft as the victim and states the publication status is published.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

What was taken

8M~ records containing: significant PII, employee and customer contact information, authentication data, password hashes, portal identities, corporate account information, business leads, facilities management records, internal service tickets, and access permissions.

File types seen
7zd0 × 1
Sample files (1)
microsoft_exfilsquad.7zd0