Fulcrumsec
Fulcrumsec is a ransomware group with a financial motive, tracked by Brandefense. It targets 4 sectors, including Technology, and Transportation and Logistics, in 5 countries, including the United States and the United Kingdom. It uses 4 MITRE ATT&CK techniques and exploits 1 known CVE.
- Techniques
- 4
- Exploited CVEs
- 1
- First seen
- May 1, 2026
- Last seen
- Sep 1, 2026
- Record updated
Who They Target.
About Fulcrumsec.
FulcrumSec is a data extortion group active since approximately September 2025, specializing in high-speed exfiltration of cloud-hosted databases by exploiting unrotated API keys and misconfigured cloud permissions rather than deploying encryption, with known victims including Australian fintech youX and LexisNexis.
Last updated Sep 22, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.