Skip to content
Leak-site post naming Rise UP, captured by ThreatCluster

Rise UP

everest

Ransomware leak-site victim intelligence · EN

Data size
473.08 GB
Files
82,897
Views
36,000
Posted
Sep 1, 2026
Publication
Sep 7, 2026
Countdown
The files will be published after the timer counts down.
Industry
SaaS learning-platform operations

Summary

Written by ThreatClusterfrom file listing, victim profile, leak post, screenshot, ransom note

Everest claims Rise Up’s data repository comprises 473.08 GB across 82,897 files that were taken. Data categories claimed include HR records, learner data, CRM data, contracts, pricing data, security questionnaires, employee information and customer data. The leak page is published, with a countdown for additional files, and the victim profile lists riseup.ai as a SaaS learning-platform operator with platforms named including SSO, Azure and OVH.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Platforms
Azure OVH FileZilla SSO HRIS

What was taken

Rise Up data repository contains 82,897 files totaling 473.08 GB. Content covers customer delivery, LMS implementation, workforce and learner data, training activity, CRM, Customer Success, sales, RFP/RFI material, contracts, pricing, product strategy, analytics, security, integrations, marketing, events, board reporting and internal employee documentation.

Data categories
customer delivery and LMS implementationworkforce datalearner datatraining activityCRM dataCustomer Success datasales dataRFP/RFI materialcontractspricingproduct strategyanalyticssecurityintegrationsmarketingeventsboard reportinginternal employee documentation
File types seen
js × 3,881jpg × 6,190mp4 × 1,941pdf × 30,958png × 13,055docx × 3,883pptx × 4,934xlsx × 3,289
Sample files (1)
Annex 8_RFP LXP_MBDA_[RISE UP]_Personal data protection compliance questionnaire.xlsx

Ransom note

Published by the group on their leak site, reproduced verbatim.

The files will be published after the timer counts down. The company still has time to get in touch with us

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

notice
The company still has time to get in touch with us
Major formats
PDF 30,958; PNG 13,055; JPG 6,190; PPTX 4,934; DOCX 3,883; JS 3,881; XLSX 3,289; MP4 1,941
Overall assessment
Rise Up holds a broad internal record of SaaS learning-platform operations, customer implementation, workforce data, learner activity, commercial relationships, product development and technical integrations.
Major storage drivers
MP4: 245.34 GB; PPTX: 93.27 GB; MOV: 32.18 GB; PDF: 16.30 GB; JPG: 12.17 GB; M4V: 11.99 GB; AI: 10.46 GB
Largest business areas
SALES-MARKETING: 20,147 files; UK: 3,019 files; DELIVERY: 42,928 files; MARKETING: 3,932 files; BRAND & COMMUNICATIONS: 5,507 files; PRODUCT: 6,785 files
Rise Up data repository contains
82,897 files totaling 473.08 GB
Confirmed person-linked data spans
26 named customer or partner organizations, including APRIL, AFNOR DRH, Biocodex, Bouygues Telecom, Célio, Compagnons du devoir, Cromology, EFFIA, Foncia/Emeria, Groupe IGS, Mantu, MLOZ, OceanSkills, Partena Professional, PHE, PilejePlus, Promotrans, Sika, Système U, Vicat and Ville de Bruxelles.

Leak-site images (11)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
onion leak page11 KB
The image features the logo of Italtel, consisting of a stylized triangular design in blue, green, and yellow, alongside the company name in black text.
onion leak page16 KB
Logo of VIVOTEK, featuring the brand name in blue with a stylized camera icon.
onion leak page16 KB
onion leak page1.5 KB
Logo of Keysight Technologies featuring a red waveform graphic and the company name in white text.
onion leak page128 KB
Logo of CCA Bank featuring a purple octagonal design with the text "CCA Bank" and a tagline in French.
onion leak page7.5 KB
Logo featuring a stylized letter "E" in red and a gray arrow pointing to the right.
onion leak page6.8 KB
Logo featuring the text "GRUPO DT" and "DESGUACES TENERIFE," accompanied by a stylized car outline in orange.
onion leak page19 KB
Logo of Capgemini featuring a blue stylized cloud shape above the name "Capgemini" with the tagline "Consulting. Technology. Outsourcing." below.
onion leak page27 KB
Logo of Atlas Air Worldwide featuring the company name in blue with a yellow globe design above it.
onion leak page6.7 KB