RANSOMWARE VICTIM⚠ DUPLICATE CLAIM
GYF
sarcoma📅 March 30, 2026
8
same group
Attack Intelligence
GYF was compromised in a ransomware attack attributed to sarcoma in March 2026. The organization, operating in an undisclosed sector in Unknown, was added to the group's data leak site as part of an extortion campaign.
sarcoma operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.
Design and develop IT products and services for the financial marketGeo: Argentina - Leak size: 1.5Tb - Contains: SQL
Additional Details
Other Victims — sarcoma (8)
Quick Facts
Attack DateMar 30, 2026
Intel Sourceransomware.live
StatusDUPLICATE CLAIM
Threat Group
External Links
Data sourced from Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Victim listing does not imply confirmed breach — intelligence based on group claims.