AGFA

AGFA was compromised in a ransomware attack attributed to everest in November 2025. The organization, operating in the Technology sector in Belgium, was added to the group's data leak site as part of an extortion campaign.

everest operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

[AI generated] AGFA, short for AktienGesellschaft für Anilin-Fabrikation, is a multinational company that develops, manufactures, and distributes analogue and digital imaging systems and IT solutions. The company's history traces back to 1867 in Berlin, Germany. The company operates in four divisions: health care, graphic systems, materials, and glass. Products include systems for radiology, cardiology, hospital and clinical care, printing and publishing industries.

Intelligence correlations link this incident to 1 vulnerability(ies) including CVE-2026-3300, which may have been leveraged as initial access vectors or for lateral movement.