Morgan Records Management
Attack Intelligence
Morgan Records Management was compromised in a ransomware attack attributed to everest in January 2026. The organization, operating in the Business Services sector in United States, was added to the group's data leak site as part of an extortion campaign.
everest operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.
[AI generated] Morgan Records Management is a company specializing in secure document storage, data protection, and document destruction services. They offer solutions for digital transitions, including scanning services, and electronic content management systems. Their focus is on protecting client information, helping businesses save space, reduce risk, and manage data more efficiently. They operate both domestically and internationally.
Intelligence correlations link this incident to 1 vulnerability(ies) including CVE-2026-3300, which may have been leveraged as initial access vectors or for lateral movement.