Summary
Written by ThreatClusterfrom site fields, file listing, victim profile, leak post, screenshot, ransom noteEverest claims Rodschinson Investment’s archive—64.72 GB across 28,495 files in 193 archive packages—was exfiltrated, spanning internal corporate, operational, financial, commercial, technical, HR, client-delivery and historical data. The leak page identifies the victim as Rodschinson Investment (domain rodschinson.com; sector real estate and M&A). The attackers claim the data categories taken include internal corporate data, operational data, financial data, commercial data, technical data, HR data, client-delivery data and historical data. The leak page is published and shows a countdown for publication; the ransom note states the files will be published after the timer counts down and the company still has time to contact them.
Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.
Victim profile
- Platforms
- Odoo Zoho WHISE Phingoo CRM Sendinblue ZeroBounce Outlook Microsoft 365 VoxCRM CreditSafe VOIP SMS
What was taken
The Rodschinson Investment archive represents a large internal corporate, operational, financial, commercial, technical, HR, client-delivery and historical data environment. The available dataset contains 28,495 files with a total volume of approximately 64.72 GB. The collection is distributed across 193 archive packages, including 62 primary archives and 131 nested archives. The data covers investment-property brokerage, asset sourcing, buyer and seller management, property valuation, transaction preparation, client data rooms, CRM operations, financial due diligence, legal documentation, marketing, recruitment, internal training, email communication and historical business records. The materials document active business processes and long-term property records, including historical title, construction, cadastral, financial and regulatory documents.
Ransom note
Published by the group on their leak site, reproduced verbatim.
The files will be published after the timer counts down. The company still has time to get in touch with us
Also stated on the leak page
Fields this group publishes that do not map to a standard column. Labels are the site's own.
- notice
- The files will be published after the timer counts down. The company still has time to get in touch with us
- latest_post
- Jul 12
- archive_packages
- 193 archive packages, including 62 primary archives and 131 nested archives
- largest_data_groups
- Largest active property group occupies approximately 11.78 GB and contains 2,756 files. A major historical property group occupies 10.56 GB and contains 6,179 files. The internal training and operational-knowledge area accounts for 7.34 GB and 1,116 files. A supporting property-document group occupies 4.89 GB and contains 1,616 files, while the commercial prospecting area occupies 4.13 GB and contains 745 files.
- ransom_timer_notice
- The files will be published after the timer counts down. The company still has time to get in touch with us
- data_scope_description
- The Rodschinson Investment archive represents a large internal corporate, operational, financial, commercial, technical, HR, client-delivery and historical data environment.
- main_volume_components
- The main volume is formed by property documentation, photography, presentations, structured CRM datasets, video training and historical transaction materials.
- rodschinson_data_source
- rodschinson.com 64 GB DataBase
Leak-site images (11)
Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.