TESSCO listed on Payoutsking leak site following claimed data exfiltration

• Ransomware group: Payoutsking
• Country: United States
• Sector: Technology
• Announcement date: April 30, 2026

Payoutsking claims to have exfiltrated data from TESSCO

The ransomware group known as Payoutsking has listed the technology company TESSCO on its dedicated leak site. According to the announcement made on April 30, 2026, the threat actor group claims to have successfully exfiltrated 615 GB of data from the organization's systems. While the group has posted this information publicly, details regarding the specific identity and background of the Payoutsking group remain limited.

Details of the claimed attack

According to the claims made by the Payoutsking group, the intrusion into TESSCO's systems occurred on March 9, 2026. The group alleges that they gained unauthorized access to the network and subsequently encrypted the organization's data. This type of activity is characteristic of modern ransomware operations, which often employ a double extortion tactic. In such scenarios, attackers not only encrypt a victim's files to disrupt operations but also steal sensitive information to use as leverage, threatening to release the data on a public leak site if a ransom is not paid.

The group asserts that the breach resulted in the theft of a significant volume of information. The total amount of data claimed to be stolen is 615 GB. The specific contents of this data dump, as described by the attackers, include a variety of sensitive corporate and client-related information.

Data types involved in the leak

The information allegedly stolen by the Payoutsking group includes several categories of highly sensitive data. Based on the group's claims, the leaked content consists of:

• Customer contact information, including over 100,000 emails and phone numbers
• Security plans, specifically including design plans for the Portland International Airport
• Salesforce backups containing over 500,000 customer records

The inclusion of critical infrastructure design plans, such as those for the Portland International Airport, introduces significant concerns regarding the security of essential public services. Furthermore, the exposure of large-scale customer databases and contact lists presents a major privacy risk to the individuals involved.

About TESSCO

Tessco Technologies is a technology company that provides products and solutions for wireless communication infrastructure. The company offers equipment supply and logistics services for network operators and enterprise customers.

Potential impact and security implications

This incident may pose secondary risks to the organization's customers and partners, such as identity theft and targeted phishing attacks. The exposure of design plans for Portland International Airport could raise concerns regarding critical infrastructure security and may trigger investigations by relevant authorities. As the organization is based in the US, it may face legal consequences under state-level data breach notification laws and federal regulations. Furthermore, the disclosure of trade secrets could negatively impact the organization's market value and business reputation.

For organizations operating within the technology and communications infrastructure sectors, such incidents highlight the necessity of robust defensive measures. Common defensive steps for organizations include implementing multi-factor authentication, maintaining rigorous patch management schedules, and ensuring that off-site backups are isolated from the primary network to prevent encryption during an attack. Additionally, monitoring for unauthorized data exfiltration and implementing strict access controls for sensitive databases, such as Salesforce, can help mitigate the impact of a potential breach. As seen in this case, the loss of sensitive design plans and customer data can lead to complex legal, regulatory, and reputational challenges that extend far beyond the initial technical disruption.