Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us

The Excalibur Group

theexcaliburgroup.com

Discovered 2026-10-20 17:52 UTC
Est. attack date 2026-10-20
Country US
Sector
Not Found
Duplicate Entry
This victim has been identified as a duplicate of another entry in our database. However, this may not always be the case: the same organization can be targeted multiple times by the same or different ransomware groups, which may result in separate legitimate entries. Search for related entries

Description:

About The Excalibur Group The Excalibur Group is a Washington D.C. based company that focuses on enhancing local, state, and federal programs through staff augmentation, training, and program management in the Defense, IT, Workforce, Environmental, and Legal sectors. They provide specialized job training and placement services for individuals in various industries, including transitioning soldiers. The company also offers both permanent and contingent labor to support clients' internal IT and R&D projects. Their mission is to deliver efficient contract management and cost-effective solutions while promoting meaningful Veteran employment. Company The Excalibur Group was attacked, resulting in the theft of more than 600 GB of confidential data, such as banking and other financial information, personal data of employees and customers, and information marked “secret”. Currently, more than 400,000 files are not protected by The Excalibur Group

Exposure Report
by ParanoidLab
15
Passwords
0 critical
0
Cookies
0 critical
Last queried 2026-10-15 17:03 UTC

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • domain.operationsweb.com
MX Records
  • us-smtp-inbound-1.mimecast.com. Mimecast
  • us-smtp-inbound-2.mimecast.com. Mimecast
TXT Records
  • 2diiqk25j1qdp9ng6majme8932
  • ca3-63933e2dc3754dd7a75cdb0a16000a0c
Cloud / SaaS Services Detected
Mimecast

Leak Screenshot:

Leak Screenshot

Other recent victims