City of Atlanta

City of Atlanta was compromised in a ransomware attack attributed to ExfilSquad in July 2026. The organization, operating in the Government & Defense sector in United States, was added to the group's data leak site as part of an extortion campaign.

ExfilSquad operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

DATA SUMMARY: 3M~ records containing: significant PII, citizen service requests, addresses, municipal case history, and internal case management data.