Summary
Written by ThreatCluster from site fields, file listing, victim profile, leak post, screenshot, ransom noteEverest claims Rodschinson Investment’s archive—64.72 GB across 28,495 files in 193 archive packages—was exfiltrated, spanning internal corporate, operational, financial, commercial, technical, HR, client-delivery and historical data. The leak page identifies the victim as Rodschinson Investment (domain rodschinson.com; sector real estate and M&A). The attackers claim the data categories taken include internal corporate data, operational data, financial data, commercial data, technical data, HR data, client-delivery data and historical data. The leak page is published and shows a countdown for publication; the ransom note states the files will be published after the timer counts down and the company still has time to contact them.
Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.
What was taken
Rodschinson Investment archive containing a large internal corporate, operational, financial, commercial, technical, HR, client-delivery and historical data environment; 28,495 files across 193 archive packages totaling 64.72 GB, including property documents, CRM data, financials, legal docs, training and communications.
Ransom note
Published by the group on their leak site, reproduced verbatim.
The files will be published after the timer counts down. The company still has time to get in touch with us
Also stated on the leak page
Fields this group publishes that do not map to a standard column. Labels are the site's own.
- ransom_timer_notice
- The files will be published after the timer counts down. The company still has time to get in touch with us
Leak-site images (11)
Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.