Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business

Logo PROVAIL

Group: Beast

Discovered by ransomware.live: 2025-07-29

Estimated attack date: 2025-06-10

Country: US

Data exfiltrated: 1TB

Description:

PROVAIL is one of Washington State's largest, multi-service agencies dedicated to meeting the needs of children, youth, and adults with disabilities who need an integrated, complex set of services to live life according to their own choices. Serving primarily King and Snohomish Counties, PROVAIL offers a comprehensive range of services to support people, with even the most severe disabilities, in all major areas of life so they can live, work, play, and fully participate in the community of their choice.



DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • domain.operations web.com
MX Records
  • alt3.aspmx.l.google.com.
  • alt1.aspmx.l.google.com.
  • alt2.aspmx.l.google.com.
  • aspmx.l.google.com.
  • alt4.aspmx.l.google.com.
TXT Records
  • Value: virtru-site-verify=TkHPMwRvBLmvEMZ8LtcPhm9xsGKykAUspcnuKaxk
  • v=spf1 include:_spf.google.com include:servers.mcsv.net include:_spf.salesforce.com ~all
  • MS=FD637693F495BC3C193C19D4F0103CE26F311167
Cloud / SaaS Services Detected
Salesforce

Leak Screenshot:

Leak Screenshot