New American Funding data leak claimed by Everest ransomware group
The threat actor known as Everest claims that data belonging to New American Funding has been leaked.
- Published
- 2 min read
- 2 min read
- Ransomware group: Everest
- Country: United States
- Sector: Financial Services
- Announcement date: July 24, 2025
Everest claims full data leak of New American Funding
The threat actor known as Everest has claimed responsibility for a data breach involving New American Funding. According to an announcement posted on the group's leak site on July 24, 2025, the group asserts that they have obtained access to the organization's data and have subsequently published the full leak of the institution's information.
Ransomware groups often utilize leak sites to pressure victims into paying ransoms. This tactic is a core component of double extortion, where attackers not only encrypt an organization's systems but also steal sensitive data to threaten its public release. By listing a victim on a dedicated site, the threat actor aims to maximize visibility and reputational damage to compel the target into meeting their demands.
Details of the claimed incident
The announcement made by the Everest group states that the entirety of the institution's data has been published. This claim was officially posted on July 24, 2025, which coincides with the date the group claims the attack occurred. This type of public listing is a common method used by cybercriminals to demonstrate the success of their intrusion and to signal to the victim that their data is no longer under their exclusive control.
Despite the claim that a full leak has been published, the group has not provided specific details regarding the content of the stolen information. While a screenshot may indicate that the data has been made available, there have been no specific file types or data samples provided to the public. Consequently, the exact nature and scope of the compromised information remain unverified through the group's announcement alone.
The target organization
New American Funding is a mortgage lending and financial services company based in the United States. The company provides a variety of residential mortgage solutions and refinancing services to its clients.
Potential impact and industry implications
The Everest group is recognized as a Russian-speaking actor that has been involved in data theft and extortion activities since 2020. Because New American Funding operates within the financial services sector, there is a significant risk that the leaked data could contain customer financial information or personally identifiable information. Such a breach carries heavy implications for the organization, including potential legal sanctions and the necessity of navigating complex compliance processes under relevant US state laws and federal regulations.
Furthermore, the exposure of such data creates secondary risks for the victims. There is a heightened possibility that the leaked information could be utilized by malicious actors for identity theft or for conducting targeted phishing attacks against the organization's clients. This creates a risk of secondary victimization for both the customers and the employees of the institution.
For organizations operating in the financial sector, maintaining robust cybersecurity postures is essential to mitigate these risks. Common defensive strategies include implementing strict access controls, maintaining regular offline backups, and conducting continuous monitoring of network traffic to detect unauthorized access. Organizations must also prioritize data encryption and employee training to defend against the social engineering tactics often used in conjunction with data theft.
- No specific data types were named in the listing.