Skip to content
Leak-site post naming Sedgwick Government Solutions, captured by ThreatCluster

Sedgwick Government Solutions

tridentlocker

Ransomware leak-site victim intelligence

Data size
3.39 GB
Files
2,947
Posted
Dec 30, 2025
Country
US
Industry
Public Sector

Summary

Written by ThreatClusterfrom site fields, file listing, leak post, screenshot, our reporting

TridentLocker claims to have stolen 3.39 GB of data from Sedgwick Government Solutions, totaling 2,947 files. Sample filenames published include certs.7z, IT.7z, LHI Copy 20250218.7z, LHI Copy 20250219.7z, NVRS.7z and SCA Documents.7z. The leak post is published and carries a leak date of 30 December 2025. Our reporting notes Sedgwick confirmed a data breach on January 4, 2026.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

What was taken

The leak contains 2947 files totaling 3.39 GB in size.

File types seen
7z × 6
Sample files (6)
certs.7z
IT.7z
LHI Copy 20250218.7z
LHI Copy 20250219.7z
NVRS.7z
SCA Documents.7z

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

Leak date
30.12.2025

Leak-site images (1)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture