Professional Trust Company listed on Everest ransomware leak site

• Ransomware group: Everest
• Country: Italy
• Sector: Financial Services
• Announcement date: September 15, 2025

Everest ransomware group claims Professional Trust Company data breach

The threat actor known as Everest has listed Professional Trust Company on its leak site. This announcement, which appeared on September 15, 2025, indicates that the group claims to have obtained data belonging to the organization. This development marks a significant escalation in the ongoing threat landscape facing financial institutions.

Details of the alleged attack

According to the announcement posted on the Everest leak platform, the group claims to have successfully targeted Professional Trust Company. The announcement was officially created on September 15, 2025, and the group asserts that the attack occurred on the same day. While the listing is a direct claim by the threat actor, the specific details regarding the method of entry or the exact nature of the intrusion have not been provided in the public announcement.

Ransomware leak sites serve as a primary tool for extortion-based cybercrime. In these scenarios, threat actors often utilize a tactic known as double extortion. This method involves not only encrypting an organization's systems to disrupt operations but also exfiltrating sensitive data. The attackers then threaten to publish this stolen information on a public leak site unless a ransom is paid. This dual pressure aims to maximize the leverage held by the criminals over the victim organization.

Data involved in the incident

The listing names no specific data types or categories of information that have allegedly been compromised. There is no information provided regarding the volume of data or the specific file counts involved in this incident.

Organization profile

Professional Trust Company is an organization operating within the financial services sector. The company is based in Italy.

Potential risks and industry implications

This incident may pose a risk of exposure for the organization's financial records or customer information. Because the organization is based in Italy, a potential data breach could lead to legal consequences under the General Data Protection Regulation (GDPR). Such regulatory frameworks impose strict requirements on how organizations must protect personal data and how they must respond when a breach occurs.

Given the past activities of the Everest group, it is possible that the organization may be subject to double extortion tactics. This adds a layer of complexity to incident response, as the organization must manage both the technical recovery of systems and the reputational and legal fallout of a potential data leak. Furthermore, there may be a risk that the leaked data could be utilized for identity theft or targeted phishing attacks against the organization or its clients.

For organizations operating in the financial services sector, maintaining robust defensive postures is essential. This typically involves implementing multi-factor authentication, maintaining regular offline backups, and conducting continuous monitoring of network traffic to detect anomalous behavior. Furthermore, organizations must be prepared for the legal and regulatory complexities that arise when data privacy is compromised, particularly when operating within jurisdictions governed by strict data protection laws.