NAI Earle Furman data allegedly leaked by secp0 group

• Ransomware group: secp0
• Country: United States
• Sector: Professional Services
• Announcement date: September 22, 2026

Secp0 claims responsibility for NAI Earle Furman data leak

The threat actor known as secp0 has published a claim on its leak site regarding a data breach involving NAI Earle Furman. According to the announcement made on September 22, 2026, the group alleges that they have successfully exfiltrated a significant amount of data belonging to the organization. The threat actor claims that the stolen information was obtained directly from the organization's file servers.

This type of activity is characteristic of modern ransomware operations, often involving double extortion. In such scenarios, attackers do not merely encrypt an organization's systems to disrupt operations; they also steal sensitive data to use as leverage. By threatening to release confidential information on a public leak site, the attackers aim to pressure the victim into paying a ransom to prevent the exposure of their proprietary or personal information.

Details of the alleged data exfiltration

The announcement made by secp0 provides specific details regarding the scope of the alleged theft. The group claims that the dataset they have published covers approximately 1.36 million file paths. While the group has posted an announcement on their leak site, no screenshots were provided to verify the contents of the stolen data at the time of the posting.

The information allegedly contained within the leak includes several categories of sensitive corporate and personal data. The group claims the following types of information were compromised:

• Brokerage deals
• Property management data
• Commission records
• Employee personal data

Furthermore, the threat actor claims that the stolen data includes information from the firm Croxton Gray, which had been absorbed by NAI Earle Furman. This suggests that the breach may have implications for legacy data and historical records from previous business entities integrated into the current organization.

The target organization

NAI Earle Furman is a commercial real estate services firm based in the United States. The company operates across various specialized areas within the industry, including real estate brokerage, property management, and investment advisory services. Given its role in professional services, the organization handles a wide array of sensitive client information and complex transactional data.

Potential risks and industry implications

The alleged leak of such a vast number of file paths poses several significant risks. For the organization, the exposure of brokerage deals, commission records, and property management portfolios could lead to the disclosure of trade secrets and a loss of client trust. Such a breach can be particularly damaging in the professional services sector, where business relationships are built on confidentiality and the secure handling of sensitive financial and property information.

Beyond the corporate impact, there are substantial risks to individuals. The inclusion of employee home directories and personal data in the claim suggests that employees may face secondary risks, such as identity theft or highly targeted phishing attacks. When personal information is leaked, attackers often use it to craft convincing social engineering campaigns designed to deceive employees or clients.

Because NAI Earle Furman is based in the United States, this incident may trigger legal processes under relevant state laws and data protection regulations. Organizations facing such incidents often must navigate complex regulatory landscapes regarding mandatory breach notifications and potential liability. To defend against such threats, organizations typically implement security measures such as multi-factor authentication, rigorous access controls on file servers, and continuous monitoring of network traffic to detect unauthorized data movement.