Skip to content
Ransomware

L3Harris listed on Kyber ransomware leak site following alleged data breach

The threat actor known as Kyber has listed L3Harris on its leak site, alleging a data breach.

By
Siberpol Intelligence Unit
Published
2 min read
2 min read
  • Ransomware group: Kyber
  • Country: United States
  • Sector: Government & Defense
  • Announcement date: July 30, 2026

Kyber claims a data breach against L3Harris

The threat actor known as Kyber has listed L3Harris on its dedicated leak site, alleging that the organization has suffered a data breach. This announcement, made on July 30, 2026, follows a claimed attack date of March 18, 2026. While the listing confirms the group's intent to publicize the incident, the specific details regarding the breach remain unverified.

Ransomware groups often utilize leak sites to exert pressure on their victims through a tactic known as double extortion. In these scenarios, attackers not only encrypt an organization's internal systems to disrupt operations but also steal sensitive data, threatening to release it publicly if a ransom is not paid. This method increases the leverage held by the threat actor, as the threat of a public leak can cause significant reputational and legal consequences for the victimized company.

Details of the alleged incident

According to the information provided by the Kyber group, the organization's systems were targeted in an attack that allegedly took place several months prior to the public listing. The group's announcement on their platform serves as a public claim of successful intrusion and data exfiltration.

Despite the claim of a breach, the evidence provided by the threat actor is currently insufficient to determine the scope of the incident. The screenshot provided alongside the listing on the leak site displays only a human verification screen, offering no visual evidence of compromised files or internal systems. Consequently, the nature and volume of the alleged leaked data remain unknown.

  • The listing names no specific data types.

About L3Harris Technologies

L3Harris Technologies is a global aerospace and defense technology company that provides mission-critical solutions for government, defense, and commercial sectors. The company specializes in advanced defense systems, communication equipment, and electronic warfare solutions.

Security implications and industry risks

A claim of this nature against an organization operating in the defense and technology sector like L3Harris may pose significant risks regarding the security of sensitive government data. Because of the critical nature of the services provided by such entities, a potential data breach could lead to secondary security risks for the organization's supply chain partners and government clients.

As a United States-based entity, such an incident may trigger legal investigations under federal regulations and defense industry security standards. The complexity of modern defense supply chains means that a compromise in one major provider can have cascading effects across multiple government agencies and private contractors.

Information regarding the Kyber group remains limited, leaving their specific motivations and technical methods uncertain. If the claims made by the group are eventually verified, the organization may face significant reputational damage and operational disruptions. Organizations in this sector typically focus on robust defensive measures, such as implementing zero-trust architectures, maintaining strict access controls, and conducting regular audits to mitigate the risks posed by sophisticated threat actors.

Threat Intelligence

Track ransomware groups, victim posts and indicators of compromise, and see the records that match your own assets.

Related stories