Summary
Written by ThreatClusterfrom victim profile, leak post, screenshotThe group “global” claims to have exfiltrated 178.00 GB of data from the Town of Sutton, Massachusetts, with a countdown to 11 Sept 2026 shown on the leak page. The material is described as including HR and recruitment records, internal documentation and source code. The leak page identifies the victim as TOWN OF SUTTON | MASSACHUSETTS (domain www.suttonma.gov).
Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.
Victim profile
- Domains
- suttonma.gov
What was taken
The official website of Sutton, Massachusetts, serves as a comprehensive digital hub for the town’s community. It provides residents and visitors with easy access to municipal services and up‑to‑date information. Users can explore various departments, view meeting agendas and minutes, and watch recordings of public sessions. The site also facilitates practical tasks such as paying bills online, applying for permits, and checking property details via GIS maps.
Ransom note
Published by the group on their leak site, reproduced verbatim.
DEADLINE EXPIRED // BREACH NOTICE 11 Sept 2026 A SOON RELEASE IS EXPECTED // THE FILES WILL BE AVAILABLE FOR DOWNLOAD SOON.
Also stated on the leak page
Fields this group publishes that do not map to a standard column. Labels are the site's own.
- Address
- Town of Sutton 4 Uxbridge Road Sutton, MA 01590
- CUSTODY & ESCROW
- All target disclosures and research materials are held under sealed cryptographic escrow until verified publication. Unreleased materials remain inaccessible to third parties.
- EDGE RUNTIME & LOGGING
- This public node operates on an ephemeral memory model with zero persistent logging. No user sessions, identity keys, or raw archive databases are retained on edge routing layers.
Leak-site images (8)
Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.