- Victims · 7d2+2 vs prior week
- Victims · 30d12
- Victims · 90d12
- All-time (tracked)12since 2026-10-05
- Last post10-27 19:25UTC
- Estimated earnings—public reporting
Profile · grok-4.7 · updated Summaries by Vani AI
BYOD is a data-extortion name with little or no widely cited vendor or law-enforcement reporting. This dashboard's leak-site tracking shows three claimed victim posts, all on or after 2026-10-05, with the same three names in the 7-, 30-, and 90-day windows and a last observed post on 2026-10-05. The listed names are Trump Mobile Wireless, Eteam, and Royal Selangor; these are leak-site claims, not independently confirmed breaches. Origin, tooling, ransom demands, and vulnerability use are not established in public reporting. Status is treated as active only because of those recent claimed posts, not because of a corroborated campaign assessment.
Tactics & tooling
- unknown
Targeted sectors
unknown
Notable public victims
Trump Mobile Wireless (claimed leak-site listing), Eteam (claimed leak-site listing), Royal Selangor (claimed leak-site listing)
Estimated earnings
No public figure.
Leak-site victims
12 posts · newest first| Victim | Discovered | Details |
|---|---|---|
| UPDATE: UNM | · 5d ago | [PSA] We are offering the decryption key for the remaining of locked devices for free (ONLY for the hospital sector) we did not know that it was running machines related to assisting patients in real-time, (we would keep it locked if it was appointments, patient information + research data only), we are still going to keep the data, but we will provide the decryption key for the hospital sector only. Feel free to contact us on Session. To any patient that was affected, please provide us proof, and we will pay you up to $2500 each for the inconvenience. We are sorry once again. We have morals and we have a heart, we are not villains, but we will still continue to hold companies responsible for bad security leading to the compromise of any customer data. That's the whole reason why we came about and we plan to keep it that way. | Updated on 2026-10-27 |
| University of New Mexico | · 5d ago | [PSA] 36,000 Machines Compromised, both AD forests (Main Campus + Hospital Sector(with appointments, patient information + research)) With GPOs, Two Oracle databases, every student + employee PII (including SSNs), research information, entire Entra Tenant, Oracle HR + Payroll + Banner Student Records, Internal Emails, Cerner EHR rosters. This is your entire network and infrastructure compromised, the entire university COMPLETELY. Anyways, you know where to find us (contact tab). We will take you down when communication has been established between our team and yours. | Updated on 2026-10-26 |
| Decorolala - 500 Line Sample | · 14d ago | Canaidan based home essentials, 60,544 customers, Home addresses + ZIP Code, longitude + latitude, Phone Numbers, Emails, First Name, Last Name, UPS Tracking Number & URL (includes photos of outside house), Total Price at Checkout, Device Used at Checkout, Prodcut ID ordered, Time ordered, you get the idea as we go along. Anyways, you know where to find us (contact tab). We will take you down when communication has been established between our team and yours. Reach out to us, first warning. | Updated on 2026-10-17 |
| Decorolala | · 19d ago | [PSA] Canaidan based home essentials, 60,544 customers, Home addresses + ZIP Code, longitude + latitude, Phone Numbers, Emails, First Name, Last Name, UPS Tracking Number & URL (includes photos of outside house), Total Price at Checkout, Device Used at Checkout, Prodcut ID ordered, Time ordered, you get the idea as we go along. Anyways, you know where to find us (contact tab). We will take you down when communication has been established between our team and yours. | Updated on 2026-10-13 |
| Some semi-samples Of Liberty X TMO cause we got yappatrons on twitter | · 24d ago | Lmao. Amusing tweet. However, nobody cares about Trump Mobile anymore, but you're mistaken if you think that is all we have or if they didn't get breached, or if that's what we were talking about. Sneak peek we guess, Knock yourself out. | Updated on 2026-10-08 |
| TMobile | · 24d ago | [PSA] You're in big big trouble, oh no, what will you ever do in this situation? Well, we think you should get in touch with BYOD. We won't display what we have for the public to see, just yet, we'll give you the chance. Anyways, you know where to find us (contact tab). We will take you down when communication has been established between our team and yours. | Updated on 2026-10-07 |
| Gate | Crypto Exchange | · 24d ago | [PSA] 12 Million Users, Phone numbers, Nicknames, Balance/VIP Tier List, 2FA Indicator (differentiates, Passkey/Auth) Region, UIDs, Gender, Position, AUM, Profit Rates, Verification Status, City, Strategy, Account Age, Profile Key, and SO much more. This is terrible, for you guys of course, we wonder what will happen if this ever gets out onto the corners of the internet it shouldn't. Anyways, you know where to find us (contact tab). We will take you down when communication has been established between our team and yours. | Updated on 2026-10-07 |
| Standpointe / Trinite Solutions | · 26d ago | [PSA] Finished Financial Statements, Tenant documents & files, Customer Bank Accounts, Deposit Slips, Payment/Cheque Registers, Tax & Accounting Records, Customer Information (Names, Phones, Emails, Addresses, Provinces), Employee Identities, Commercial Secrets. Anyways, you know where to find us (contact tab). We will take you down when communication has been established between our team and yours. | Updated on 2026-10-04 | SIZE: 222GB |
| Franklin Empire | · 27d ago | [PSA] You know we have over 700GB of Data, AWS Keys to your buckets, (which we dumped), Moonshot AI API keys, SMTP credentials, Packaging Slips, invoices, PDFs, Business Information, Customer PII, Inventory stash and SO much more. Your team knows how serious the breach is, hence why everything got rotated FAST, you also know how bad it can get if it gets posted in every corner of the dark web, Either reach out to us using the Contact methods listed on our site or face the consequences. Make the right decision, it's only you who can save yourselves. Anyways, you know where to find us (contact tab). We will take you down when communication has been established between our team and yours. | Updated on 2026-10-04 | SIZE: 700GB |
| Trump Mobile Wireless (Telecom) | · 27d ago | Trump mobile was informed they had been breached, they then replied with "We have no team to handle this" and that anyone who hacks them are a terrorist. Well unfortunately for them, all 3615 customers and their PII, alongside telecom details are now up for grabs. Feel free to take a gander at it yourself, don't be shy, we (and them) certainly aren't stopping you. | Updated on 2026-09-29 | SIZE: 755KB |
| Eteam | · 27d ago | Eteam was informed they had been breached, just ignored us, we are not giving any more chances, Enjoy their full BPO list EXTREME PII (some of the most sensitive shit any company has). Feel free to take a gander at it yourself, don't be shy, we (and them) certainly aren't stopping you. | Updated on 2026-09-29 | SIZE: 8.75MB |
| Royal Selangor | · 27d ago | [PSA] Both, your Registered Users & Customer list have been affected. 300K Lines Total, Includes: Names, Emails, Phone Numbers, Addresses, Purchase Amount, Payment Method, Pretty Juicy stuff you don't want getting out there. Anyways, you know where to find us (contact tab). We will take you down when communication has been established between our team and yours. | Updated on 2026-10-04 |
In the news
AllVictim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .