Everest ransomware group claims data breach against Epiq Global

• Ransomware group: Everest
• Country: United States
• Sector: Professional Services
• Announcement date: May 2, 2026

Everest ransomware group claims data breach against Epiq Global

The Everest ransomware group has listed data allegedly belonging to Epiq Global on its leak site. This announcement, made on May 2, 2026, marks a significant claim of a data breach involving the US-based professional services firm. While the group has posted the claim, the specific volume of data and the exact ransom demand remain unknown.

Details of the alleged attack

According to the claims made by the Everest group, the incident involves the unauthorized acquisition of technical data and document processing records allegedly belonging to Epiq Global. The threat actors claim that the data in question was obtained over a period of six months, suggesting a prolonged period of unauthorized access to the organization's systems.

The group has issued a threat regarding the stolen information, stating that if the organization does not contact them, the entire dataset will be published on their leak site. This tactic is a hallmark of modern ransomware operations, often referred to as double extortion, where attackers not only encrypt systems but also threaten to release sensitive information to pressure the victim into paying a ransom.

The scope of the alleged data leak

The information allegedly stolen by the Everest group is diverse, encompassing various technical and administrative files. The group claims that the stolen data includes support case materials, technical meeting recordings, application and processing logs, configuration files, and compressed archives. Furthermore, the list of compromised items includes job control files, report files, and various artifacts related to batch document processing.

Crucially, the threat actor claims that the dataset contains personally identifiable information (PII). The specific items identified as being potentially affected include:

• Personally identifiable information (PII)
• Technical meeting recordings
• Processing logs
• Configuration files

About Epiq Global

Epiq Global is a global company providing technology-enabled legal services, administrative process management, and data management solutions for law firms, corporations, and government agencies. The company specializes in litigation management, bankruptcy proceedings, and corporate restructuring.

Potential impact and security implications

The leak claim may pose a significant risk to the organization's operational continuity and client confidentiality. The presence of personally identifiable information (PII) may lead to consequences regarding state-level data protection laws and potential legal sanctions for the US-based organization. Furthermore, the exposure of this data could facilitate targeted phishing attacks or identity theft attempts against the organization's clients.

Given the past activities of the Everest group, it is possible that this situation may result in secondary extortion attempts or data sales on illicit forums. In such scenarios, attackers may attempt to contact the victim multiple times or sell the data to other malicious actors to maximize their profit.

For organizations operating in the professional services sector, such incidents highlight the critical importance of robust data protection frameworks. To mitigate the risks associated with such breaches, it is suggested that the organization conduct a comprehensive forensic investigation to determine the actual scope of the leaked data. General defensive measures for organizations facing such threats often include implementing strict access controls, maintaining comprehensive logging and monitoring, and ensuring that sensitive data is encrypted both at rest and in transit to prevent unauthorized access and exfiltration.