LowBreach / campaignMonitoring

Everstake ransomware group claims attack on da***t.com, RansomLook reports

RansomLook reports that the everstake ransomware group listed da***t.com on its leak site, an unverified claim, so wait for an official statement.

Published
Exploitation
No, not confirmed, the only evidence is a leak-site claim reported by RansomLook

What happened

RansomLook reports that the everstake ransomware group has listed the domain da***t.com on its leak site. RansomLook recorded the listing on 2026-11-02. The listing is the group’s own claim. It does not prove that an attack took place.

We could only review the headline. The full RansomLook entry could not be read. The following details are not confirmed:

  • the full name of the organisation, because the domain is partly masked in the headline
  • whether the organisation has acknowledged any incident
  • how the group says it gained access
  • what data was taken, if any, and how much
  • whether anyone has independently verified the claim

Am I affected?

This is not confirmed. The source does not name any affected products, customers, versions or types of data. The claim may matter to you if you have a business relationship with the organisation behind da***t.com. The source does not confirm any impact.

What to do now

  1. If you work with the organisation behind da***t.com, watch for an official statement or notice from the company.
  2. Do not treat the leak-site listing as proof of a breach.
  3. Check back for updates from independent or official sources.

Sources