Microsoft

Microsoft was compromised in a ransomware attack attributed to ExfilSquad in July 2026. The organization, operating in the Technology sector in United States, was added to the group's data leak site as part of an extortion campaign.

ExfilSquad operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

Revenue: $318B DATA SUMMARY: 8M~ records containing: significant PII, employee and customer contact information, authentication data, password hashes, portal identities, corporate account information, business leads, facilities management records, internal service tickets, and access permissions.