Performance Data Solutions targeted by CRPxO ransomware group

• Ransomware group: CRPxO
• Country: United States
• Sector: Professional Services
• Announcement date: July 27, 2026

Performance Data Solutions allegedly targeted by CRPxO

The CRPxO ransomware group has posted an announcement on its leak site claiming responsibility for a cyberattack against Performance Data Solutions. According to the group's claim, which was listed on July 27, 2026, they have successfully exfiltrated 12.8 GB of data from the organization's systems.

Ransomware attacks of this nature often involve a tactic known as double extortion. In these scenarios, threat actors do not merely encrypt an organization's files to disrupt operations; they also steal sensitive information beforehand. The attackers then threaten to publish this stolen data on a public leak site if the victim refuses to meet specific demands. This method places immense pressure on companies by threatening their reputation and intellectual property alongside their operational capabilities.

Details of the alleged intrusion

The CRPxO group claims to have infiltrated the corporate network of Performance Data Solutions. According to the group's statement, the breach involved accessing and exfiltrating data from engineering workstations and file servers within the organization's infrastructure. The group has asserted that if their demands are not met, the stolen information will be published on their dedicated leak site.

While the group has made these claims, information regarding the specific identity and methods of this group remains limited. Ransomware groups frequently use leak sites to host announcements and, in some cases, samples of stolen data to prove the validity of their claims and to coerce victims into paying ransoms.

Alleged data types and affected information

The data allegedly stolen by the CRPxO group is extensive and covers various critical areas of the organization's operations. The group claims that the leaked information includes highly sensitive technical and administrative files. The following categories of data are reportedly involved in the breach:

• Engineering data
• Customer database
• Financial records
• Employee records
• Technical documentation

Specifically, the group claims the exfiltrated data includes MoTeC data acquisition system configurations, custom wiring harness designs, and ECU calibration files. Furthermore, the group alleges the theft of technical documentation, customer databases, purchase history, invoices, bank statements, tax records, employee records, and email archives.

Organization profile and potential impact

Performance Data Solutions is a technology company that provides data acquisition, analysis, and performance monitoring solutions specifically for the motorsport industry. They specialize in processing and optimizing data collected from racing vehicles, making them a provider of highly specialized technical information.

This alleged breach may pose significant risks to the institution's intellectual property and customer privacy. Because the organization is based in the United States, a confirmed breach could trigger legal obligations under state-level data breach notification laws and relevant regulatory frameworks. The exposure of customer and employee data may facilitate identity theft and targeted phishing campaigns against the affected individuals.

Furthermore, the publication of proprietary technical data and trade secrets, such as the specialized racing configurations mentioned, could negatively impact the organization's competitive position in the motorsport sector. For organizations in highly specialized technical sectors, protecting intellectual property is critical to maintaining a market advantage.

Defensive considerations for technical service providers

To mitigate the risks associated with such attacks, organizations often implement multi-layered security strategies. This typically includes robust network segmentation to prevent lateral movement from workstations to sensitive file servers, and strict access controls to limit the amount of data any single user or system can access. Continuous monitoring of network traffic can help identify large-scale data exfiltration attempts in real time. Additionally, maintaining offline, immutable backups is a standard defensive step to ensure data can be recovered without paying a ransom, though this does not address the risk of data exposure.