Morguard

Morguard was compromised in a ransomware attack attributed to helix in August 2026. The organization, operating in the Not Found sector in United States, was added to the group's data leak site as part of an extortion campaign.

helix operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

Morguard reached out, took extensions, then ignored the negotiation with no real offer. Contacting us and stalling is not a strategy. Deadlines stand. Silence after outreach gets a private board and a countdown then publication.