Soft-inc.com listed on m3rx ransomware leak site

• Ransomware group: m3rx
• Country: Japan
• Sector: Technology
• Announcement date: May 17, 2026

A new data breach claim targeting soft-inc.com

The threat actor known as m3rx has listed data allegedly belonging to soft-inc.com on their leak site. This announcement, which appeared on May 17, 2026, marks a potential security incident for the US-based technology consulting firm. While the listing has been made public on the group's platform, the claim remains an allegation by the threat actor.

Details of the alleged attack

According to the announcement made by the m3rx group, the breach is claimed to have occurred on May 17, 2026. The threat actor asserts that they have successfully obtained a significant volume of information from the target organization. Currently, public information regarding this specific group remains limited, making it difficult to establish a broader pattern of activity or specific motivations beyond the listing itself.

The scale of the alleged theft is described through the following metrics:

• Approximately 49.8 GB of data
• A total of 9289 files

Regarding the specific nature of the files, there is no detailed information regarding the content of the allegedly leaked data. However, given the firm's operations in technology consulting and professional staffing, it is possible that corporate and personal data may be included in the stolen set.

About soft-inc.com

Founded in 1981, SOFT Inc. is a US-based technology consulting and professional staffing firm. The company specializes in providing critical technology solutions, IT services, and engineering talent to Fortune 500 companies. As a provider of specialized services to large-scale enterprises, the organization occupies a significant position within the technology sector.

Potential impact and security implications

This alleged leak may negatively impact the firm's operational continuity and reputation. Depending on the nature of the data, the exposure of sensitive information belonging to employees or clients could lead to secondary risks such as identity theft and targeted phishing attacks. As a US-based entity, a potential data breach may trigger requirements under state-level data protection laws and relevant regulations.

The threat actor's move to publish the data may create double-extortion pressure on the firm. Double extortion is a common tactic used by ransomware groups where, after encrypting a victim's systems, the attackers also steal sensitive data and threaten to leak it publicly unless a ransom is paid. This adds a layer of pressure, as the victim faces the risk of public exposure even if they can restore their systems from backups.

The scale of the leak may necessitate a comprehensive review of the firm's security protocols. For organizations operating in the technology and staffing sectors, maintaining robust defensive measures is critical. Common defensive steps for organizations facing such threats include implementing multi-factor authentication, maintaining offline backups, and conducting regular security audits to identify vulnerabilities. The potential for secondary attacks, such as phishing, highlights the importance of continuous employee training and monitoring for anomalous network activity.