Ellucian PowerCapus (ellucian.com)

Ellucian PowerCapus (ellucian.com) was compromised in a ransomware attack attributed to shadowbyt3$ in April 2026. The organization, operating in an undisclosed sector in Unknown, was added to the group's data leak site as part of an extortion campaign.

shadowbyt3$ operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.