Summary
Written by ThreatClusterfrom site fields, file listing, victim profile, leak post, screenshotThe leak claims 796,742 files were taken from Westland Insurance, with data hosted on SharePoint and GoFile. The group states the stolen data includes Insurance Policies, Underwriting (Policyholder), Claims (Policyholder), HR/People, Legal/Compliance, NDA/Confidential, M&A/Acquisitions, Banking/Treasury, Payroll/Compensation, Tax, and PII, and that Westland reached out, received the full demand, and stalled with no serious number. Sample archives published are Westland_T1.7z, Westland_T2.7z, Westland_T3.7z and Westland_T4.7z, representing four 7z archives. The leak post is published and shows a countdown to T1 releases, with later stages unlocking on schedule.
Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.
Victim profile
- Platforms
- SharePoint GoFile gofile.io
What was taken
Westland reached out, got the full demand, then stalled with no serious number.
Also stated on the leak page
Fields this group publishes that do not map to a standard column. Labels are the site's own.
- Countdown until T1 releases; later stages unlock on schedule.
- Countdown until T1 releases; later stages unlock on schedule.
Leak-site images (1)
Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.