The Everest ransomware group, a known double-extortion cybercriminal gang, has claimed responsibility for breaching two new organizations. The latest list of alleged victims posted by the group includes:
-
Accela 🇺🇸: A prominent government software (GovTech) provider based in California, USA. The company specializes in cloud-based solutions for government agencies, handling permitting, licensing, code enforcement, and community development for cities and states.
-
Notin.es 🇪🇸: A Spanish technology provider offering comprehensive management and digital services to notary offices (“Servicio Integral Notarias”). The platform manages critical legal and administrative workflows for notaries across Spain.
According to the actor, the group has exfiltrated significant amounts of sensitive information from both targets. The allegedly compromised data includes:
From Accela (1TB+ of Internal Data):
-
Over 23,000 PDF files
-
Over 11,000 CSV files
-
Backup (.bak) files
-
Confidential internal company data
From Notin.es (145 GB of Legal and Personal Data):
-
Thousands of high-quality color scans of national identity cards (DNI), passports, and foreigner identification numbers (NIE)
-
Complete notarial deeds (bills of sale, mortgage contracts, wills) containing full names, dates of birth, addresses, and marital status
-
Financial terms of transactions and account numbers (IBAN)
-
Confidential tax documents (Justificante de Retención) disclosing professional income and tax identifiers (NIF)
-
Internal financial documents of notary offices (invoices, bills)
