Iron Mountain listed on Everest ransomware leak site

• Ransomware group: Everest
• Country: United States
• Sector: Professional Services
• Announcement date: February 2, 2026

The ransomware group known as Everest has officially listed the global information management company Iron Mountain on its leak site. This announcement, made on February 2, 2026, marks a new development in the group's ongoing activities involving high-profile targets.

The claims made by Everest

According to the announcement posted on the group's platform, Everest claims to have gained access to the systems belonging to Iron Mountain. The group alleges that they have successfully obtained data from the organization. This claim was presented as part of the group's standard operational pattern, where they utilize leak sites to pressure organizations following a successful breach.

Ransomware groups often employ a tactic known as double extortion. In these scenarios, attackers do not merely encrypt an organization's files to disrupt operations; they also exfiltrate sensitive information. The threat of releasing this stolen data on a public leak site serves as additional leverage to coerce the victim into paying a ransom. By listing a company on a public platform, the group aims to maximize visibility and reputational pressure.

Details regarding the alleged data leak

At this stage, there is no information provided regarding the nature or the scope of the allegedly leaked data. While the group has claimed to have obtained data, the specific contents remain unknown. Furthermore, the screenshot content provided by the group failed to load, meaning no visual evidence is currently available to verify the claims or inspect the data.

• No specific data types were named in the listing.

When organizations face such claims, the lack of immediate clarity regarding the data volume or file types creates significant uncertainty. Without a confirmed inventory of what has been taken, it is difficult to determine the full impact of the incident on the organization's digital assets.

About Iron Mountain

Iron Mountain is a global information management company that provides a wide array of services designed to protect and manage critical assets. Their service portfolio includes physical records management, data storage, secure destruction, and digital transformation services. The company assists businesses worldwide in managing and protecting their most essential information and physical records.

Implications and potential organizational response

This situation may lead to operational disruptions and reputational damage for the organization. If the data leak claims are verified, legal processes may be triggered under state-level data protection regulations and sectoral compliance requirements, particularly because the organization is based in the United States. The potential for legal and regulatory scrutiny is a common consequence for companies in the professional services sector when data integrity is questioned.

Given the past activities of the Everest group, it is possible that the obtained data could be used for secondary extortion or identity theft. This highlights the long-term risks associated with data breaches, where stolen information can be repurposed for fraudulent activities even after the initial incident has been addressed.

To mitigate such risks, organizations often find it necessary to initiate internal audit processes to verify the validity of leak claims. Taking necessary precautions against potential data breaches is a critical step in maintaining security posture. For companies in the professional services and information management sectors, maintaining robust defensive measures and monitoring for unauthorized access is essential to protect client data and organizational integrity. Information regarding the specific capabilities and methods of the Everest group remains limited.