Skip to content

Search Ransomware Intelligence

Jump to a group, country, industry or search victims.

Listed on a ransomware leak site

Skaff Group

skaff.com

Skaff Group was listed on the Rhysida leak site on Oct 3, 2026. Information as of Oct 19, 2026.

Country: United StatesIndustry: Unknown
Updated continuously · figures as of Oct 19, 2026
Claimed by
Rhysida
First listed
Oct 3, 2026
Claims recorded
1

Leak-Site Claim.

RhysidaConfirmed claim
Posted on the leak site
Oct 3, 2026
Collected by Brandefense
Oct 3, 2026
Data claimed
Not stated
Leak-site post text, written by the group
Skaff Group SKAFF is a leader in Lebanon in the field of decorative fabrics. Files: 139,377Data volume: ~268 GB**Full HR dossiers - ~40 scans of Lebanese national ID cards (both sides + photos), a director's passport, civil-status extracts.Banking data - employee account files at Byblos Bank (named per person), Cedrus Bank corporate card program with banker contacts, account statements.Payroll violations - unpaid-salary analysis file, payroll module source code, staff leave requests.Employees' private lives - family photo archives on the work server.Commerce � price lists, Four Seasons and…

Get alerted the moment your company or a supplier is posted on a leak site.

Alert me
Other confirmed victims claimed by the same group
VictimClaimed byCountryIndustryData claimedPosted
Reed & Giordano PA
reedgiordano.com
RhysidaUnknownUnknownNot stated
Charles E. Tabor AAL LLC
charlestaborlaw.com
RhysidaUnknownUnknownNot stated
Gress Clark Young & Schoepper
gressandclarklaw.com
RhysidaUSUnited StatesLegal ServicesNot stated
Anne Arundel County
aacounty.org
RhysidaUSUnited StatesGovernment and Public SectorNot stated
RealManage
realmanage.com
RhysidaUSUnited StatesConstructionNot stated
Mat Bao Corporation
matbao.com
RhysidaVNVietnamTechnologyNot stated

Get Real-Time Alerts, IOC Feeds And Takedowns.

The Brandefense platform watches every leak site for your company, vendors and executives, and acts on what it finds.

Figures as of Oct 19, 2026. Confirmed leak-site claims collected by Brandefense technologies and validated by Brandefense analysts.

Listed on a leak site means a ransomware group has claimed the company; it is not a confirmed breach. To request a correction or removal, contact Brandefense.