Skip to content

Search Ransomware Intelligence

Jump to a group, country, industry or search victims.

Listed on a ransomware leak site

Evolve Mortgage Services

mrn3.com

Evolve Mortgage Services was listed on the INC Ransom leak site on Oct 30, 2025. Information as of Oct 19, 2026.

Country: United StatesIndustry: Unknown
Updated continuously · figures as of Oct 19, 2026
Claimed by
INC Ransom
First listed
Oct 30, 2025
Claims recorded
1

Leak-Site Claim.

INC RansomConfirmed claim
Posted on the leak site
Oct 30, 2025
Collected by Brandefense
Nov 6, 2025
Data claimed
20 TB
Leak-site post text, written by the group
Introducing Evolve Mortgage Services, the old company name mrn3.com. We stole more than 20 TB of company data. Including 2TB of databases. This company refused to resolve the issue with us with the security of its customers' data. This company does not care about the safety of its customers. They don't care about leaks and disclosure of your data. We have all the data on all clients of both companies since 2016. SSN numbers, scans of client IDs, home and work addresses, personal, home and work phone numbers, FULL credit history about each client. Personal and confidential PII form information…

Get alerted the moment your company or a supplier is posted on a leak site.

Alert me
Other confirmed victims claimed by the same group
VictimClaimed byCountryIndustryData claimedPosted
verveba.com \
verveba.com
INC RansomUSUnited StatesTelecommunicationsNot stated
fairfeelegalservices.com
fairfeelegalservices.com
INC RansomUSUnited StatesConsultingNot stated
nowaszkola.com
nowaszkola.com
INC RansomPLPolandEducation and ResearchNot stated
coopecaja.fi.cr
coopecaja.fi.cr
INC RansomCRCosta RicaFinancial ServicesNot stated
FINANCIAMENTO LTDA
lexcursos.com.br
INC RansomBRBrazilManufacturingNot stated
Wolf & Sofsky GmbH
wolfusofsky.de
INC RansomDEGermanyConstructionNot stated

Get Real-Time Alerts, IOC Feeds And Takedowns.

The Brandefense platform watches every leak site for your company, vendors and executives, and acts on what it finds.

Figures as of Oct 19, 2026. Confirmed leak-site claims collected by Brandefense technologies and validated by Brandefense analysts.

Listed on a leak site means a ransomware group has claimed the company; it is not a confirmed breach. To request a correction or removal, contact Brandefense.