vect ransomware group lists S&PGLOBAL, LiteLLM/Trivy campaign (TeamPCP) on its leak site
S&PGLOBAL, LiteLLM/Trivy campaign (TeamPCP) has been listed on the leak site by the threat group known as vect.
- Published
- 1 min read
- 1 min read
- Ransomware group: vect
- Country: United States
- Sector: Technology
- Announcement date: April 15, 2026
The threat group known as vect has listed S&PGLOBAL on their leak site, claiming to have successfully targeted the organization. According to the announcement made on April 15, 2026, the group asserts that they have gained access to internal data belonging to the company. The threat actor has indicated that negotiations with the organization are currently ongoing regarding the incident.
Details of the alleged attack
The claim made by vect suggests a significant breach involving a substantial volume of information. The group states that the total volume of the alleged stolen data is 250 GB. While the group has posted the organization on their leak site, they have not provided any screenshots to verify the contents of the stolen data. The claimed attack date for this incident is noted as October 5, 2025.
In modern cyber extortion, ransomware groups often employ a double extortion tactic. This method involves not only encrypting an organization's systems to disrupt operations but also exfiltrating sensitive data to use as leverage. By threatening to leak the stolen information on public leak sites, attackers aim to pressure the victim into paying a ransom to prevent the exposure of proprietary or sensitive information. This approach increases the pressure on the target organization, as the consequences of a leak can extend far beyond immediate operational downtime.
Alleged compromised data types
The information that the group claims to have exfiltrated is highly sensitive in nature. According to the announcement, the alleged compromised data includes various types of internal assets that could be used to further compromise the organization's digital environment. The specific items mentioned include:
- Internal projects
- Secrets
- API keys
The exposure of such technical credentials, particularly API keys, is a critical concern for any modern enterprise. These keys often serve as the