Summary
Written by ThreatClusterfrom victim profile, leak post, screenshot, our reportingHelix states that Uber's Verified Open SharePoint libraries were taken and staged across four tiers (T1 to T4) on their leak, with tiers unlocking as countdown timers reach zero. The leak page states a countdown publication status, with T1 release expected first and later stages unlocking on schedule. The victim is Uber, and the leak lists SharePoint and OneDrive as platforms.
Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.
Victim profile
- Platforms
- SharePoint OneDrive
What was taken
Uber Verified Open board SharePoint libraries staged T1 (least) → T4 (most). Release countdown live on Helix. Tiers unlock by stage when each set timer reaches 0.
Also stated on the leak page
Fields this group publishes that do not map to a standard column. Labels are the site's own.
- label
- Sensitivity layers
- value
- SharePoint libraries · T1 (least) → T4 (most). Stage packages unlock when each timer hits zero.
- panel_status
- All stages released
- All stages released
- true
- Countdown until T1 releases; later stages unlock on schedule.
- Countdown until T1 releases; later stages unlock on schedule.
Leak-site images (1)
Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.