Eligibility Tracking Calculators listed on blackshrantac leak site
Technology firm Eligibility Tracking Calculators has been listed on the leak site of the blackshrantac group. The group claims to have compromised 110 GB of data belonging to the organization.
- Published
- 3 min read
- 3 min read
- Ransomware group: blackshrantac
- Country: United States
- Sector: Technology
- Announcement date: October 28, 2025
The technology firm Eligibility Tracking Calculators has been listed on the leak site of the ransomware group known as blackshrantac. According to the announcement made on October 28, 2025, the threat actor claims to have compromised a significant volume of data belonging to the organization.
The claimed attack and extortion attempt
The threat actor identified as blackshrantac has posted an announcement on its dedicated leak platform, claiming that data allegedly belonging to Eligibility Tracking Calculators has been exfiltrated. The group asserts that the breach encompasses information from several critical internal departments, including management, compliance, human resources, IT, and accounting. By claiming to possess this sensitive information, the group aims to exert pressure on the organization through the threat of publishing or selling the stolen data.
This tactic is a hallmark of double extortion, a common ransomware strategy where attackers not only encrypt an organization's systems but also steal sensitive data to use as leverage. In such scenarios, the goal is to force a ransom payment by threatening the public disclosure of proprietary or sensitive information, which can lead to severe reputational and legal consequences. Publicly available information regarding the specific methods and identity of the blackshrantac group remains limited.
Details of the alleged data breach
The group claims that the volume of stolen data amounts to 110 GB. The content of this alleged breach is reported to be diverse, potentially including application code, database designs, database files, and various other documents. Furthermore, the announcement suggests that the breach includes highly sensitive information, such as email credentials and financial records.
The specific types of data reportedly affected include:
- Financial records
- Email credentials
- Corporate database records
- HR data
The presence of such diverse data types—ranging from technical infrastructure details like application code to sensitive personnel and financial information—highlights the potential breadth of the compromise if the claims are accurate.
Organization profile
Eligibility Tracking Calculators (ETC) is a technology company that provides software solutions for health insurance and employee benefits administration. The organization specializes in developing platforms that automate insurance eligibility tracking and calculation processes.
Potential impact and industry implications
This alleged breach may pose significant secondary risks to both the organization's employees and its customers. Specifically, the theft of personal and sensitive information can lead to identity theft and the execution of targeted phishing attacks. Because the organization is based in the United States, the nature of the leaked data could trigger legal processes under state-level data privacy regulations or HIPAA, depending on the specific content of the compromised files.
The inclusion of operational and financial information in the leak could negatively impact the organization's commercial reputation and its ability to maintain operational continuity. When data is sold to third parties or disclosed publicly, the risk of corporate data security violations increases significantly.
For organizations operating in the technology and insurance administration sectors, such incidents underscore the importance of robust defensive measures. Common industry practices to mitigate these risks include implementing strict access controls, maintaining comprehensive logging and monitoring to detect unauthorized data exfiltration, and conducting regular security audits. Furthermore, protecting sensitive data through encryption and ensuring rigorous patch management for all software and infrastructure components are essential steps in defending against the evolving tactics used by ransomware groups.