Polycom listed on Everest ransomware leak site

• Ransomware group: Everest
• Country: United States
• Sector: Technology
• Announcement date: February 2, 2026

The ransomware group known as Everest has announced the listing of Polycom on its leak site. This announcement, made on February 2, 2026, indicates that the group claims to have successfully gained access to the systems of the multinational technology organization.

The claimed attack

According to the announcement posted on the group's leak site, Everest claims to have breached Polycom's infrastructure. The group's listing occurred on February 2, 2026, which coincides with the date they claim the attack took place. While the group has publicly identified the organization as a target, the provided information remains limited to the initial announcement on their platform.

In many modern ransomware operations, groups utilize leak sites to exert pressure on their victims. These platforms serve as a public bulletin board where threat actors list organizations they have successfully compromised. By publishing a company's name, the group aims to damage the victim's reputation or pressure them into meeting ransom demands through the threat of public data exposure. This tactic is a core component of double extortion, where attackers not only encrypt data but also threaten to release sensitive information to the public or specific stakeholders.

Information regarding the data

At this stage, there is no information available regarding the nature of the data allegedly compromised in this incident. The group's leak site displays only the general interface used for such announcements, and the provided screenshots do not contain any specific data samples or detailed information regarding the alleged breach. Consequently, the listing names no specific data types or content.

When organizations face such claims, the lack of immediate technical details can create significant uncertainty. In typical ransomware scenarios, attackers may attempt to exfiltrate various types of information, ranging from internal corporate documents to sensitive customer records. However, in this specific case involving Polycom, the group has not provided any specific data content or evidence of the files they claim to have acquired.

About Polycom

Polycom is a multinational technology company that develops video conferencing, voice communication, and collaboration solutions. The organization has a significant history in the communications sector; it was acquired by Plantronics in 2018 and has subsequently operated under the Poly brand.

Risk assessment and industry implications

Given the past activities of the Everest group, this situation may pose a risk of data leakage and extortion for the organization. As the organization operates in the technology sector, any compromised data could potentially involve intellectual property or customer information. The nature of the technology sector often makes it a high-value target for cybercriminals due to the proprietary nature of the solutions developed by such companies.

Because the organization is based in the United States, a potential data breach may trigger investigations under state-level data protection laws and regulatory bodies. Organizations operating in the US must navigate a complex landscape of compliance requirements following a suspected breach. Furthermore, the group's tendency to sell access could increase the risk of secondary attacks and supply chain threats. When threat actors sell access to a network, it often leads to a cascade of different criminal entities targeting the same victim.

For organizations in the technology sector, maintaining robust defensive postures is critical. This includes implementing strict access controls, continuous monitoring of network traffic, and ensuring that all software and hardware components are regularly patched. Furthermore, because the Everest group's public information is limited, organizations must remain vigilant against various methods of intrusion that these actors might employ. Defensive strategies often involve a multi-layered approach to security, focusing on both perimeter defense and internal detection capabilities to mitigate the impact of potential breaches.