devman ransomware group lists sealbeachpd.com on its leak site

• Ransomware group: devman
• Country: United States
• Sector: Government & Defense
• Announcement date: January 12, 2026

The threat actor group known as devman has claimed responsibility for a cyberattack targeting the Seal Beach Police Department. According to an announcement posted on the group's leak site, the attackers have allegedly compromised data belonging to the organization and have published it as part of a data leak attempt.

Details of the alleged attack

The devman group has listed data that they claim belongs to sealbeachpd.com on their dedicated leak site. According to the claims made by the threat actors, they successfully gained unauthorized access to the institution's systems following a cyberattack that they allege occurred on January 11, 2026. The announcement, which was posted on the group's leak site on January 12, 2026, is being treated as a data leak attempt specifically targeting the institution's operations within the government and defense sector.

In many modern ransomware scenarios, threat actors employ a tactic known as double extortion. In these instances, attackers do not merely encrypt an organization's data to disrupt operations; they also exfiltrate sensitive information before the encryption occurs. The threat actors then use the threat of leaking this stolen data on public or private leak sites to pressure the victim into paying a ransom. While the specific ransom demand and the exact size of the stolen data have not been disclosed by the group, the listing of the organization on a leak site is a hallmark of this extortion strategy.

Alleged data contents and affected information

The information allegedly leaked by the devman group is highly sensitive, involving critical law enforcement documentation and personal details. The content of the alleged leak includes various types of highly confidential files that could impact ongoing operations. The specific items identified in the listing include:

• Police reports
• Personal information
• Forensic evidence data
• DEA case information

The presence of such diverse data types suggests a significant breach of the institution's digital environment. The disclosure of such information can have cascading effects on the integrity of law enforcement activities and the privacy of individuals involved in legal processes.

Organization profile

The Seal Beach Police Department is the local law enforcement agency serving the city of Seal Beach in California, United States. It is responsible for maintaining public safety, preventing crime, and upholding the law within the city.

Risk assessment and implications

This incident may pose a high risk due to the sensitivity of public safety and law enforcement data. The alleged exposure of DEA case information and police reports could compromise ongoing investigations and potentially facilitate secondary criminal activities. Furthermore, the disclosure of personnel's personal information may increase the risk of targeted phishing attacks and identity theft against the officers involved.

From a regulatory perspective, the institution may face legal obligations under US federal laws and state-level data protection regulations due to the nature of the compromised data. When organizations in the government and defense sector face such threats, it highlights the critical importance of robust cybersecurity frameworks. Common defensive steps for such organizations include implementing strict access controls, maintaining offline backups, and conducting regular security audits to identify vulnerabilities.

The impact of such a breach extends beyond the immediate organization, as the compromise of law enforcement data can undermine public trust and jeopardize the safety of both officers and the community. At this time, public information regarding the devman group remains limited, making it difficult to attribute the attack to a specific known entity or to predict their future movements.