Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us

Court Square Group

courtsquaregroup.com

Group Black X
Discovered 2026-11-10 04:58 UTC
Est. attack date 2026-11-04
Country US
Sector
Agriculture and Food Production Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Description:

We hacked into Court Square Group internal network and stole 3T of customer data from the RegDocs365 and ARCC cloud network. It includes sensitive info such as clinical trial data, research materials, and various reports belonging to Court Square Group customers.   To demonstrate our credibility, we will provide a list of some of the data files currently in our possession within the next few days. You may then select files from this list, and we will send the ones you have chosen.

Exposure Report
by ParanoidLab
64
Passwords
3 critical
2
Cookies
0 critical
Last queried 2026-11-10 04:57 UTC

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • domain.operationsweb.com
  • licensesCSDG.COM
MX Records
  • courtsquaregroup-com.mail.protection.outlook.com. Microsoft 365
TXT Records
  • v=spf1 ip4:173.252.137.91 ip4:173.252.137.124 include:4426740.spf07.hubspotemail.net include:spf.protection.outlook.com -all
  • 4t2eoqu3bg9b51hmmt27t47u46
  • MS=7CF2DB072DF70048AA84278495BCC07C0F67F25E
  • d5bmj3s8d561hvkc4qqmulihgt
  • google-site-verification=nuO92QtFJs8kxc2SmRnWT6sloyX7ttxZysrnIENBPBI
  • 1sqm1qlkc3m48216ebbggv62tm
  • kk6e1j9panmvcrurnm7bt2df2k
  • qm0l6q4s2pvop9o6hc0a9g1c71
  • 84q6jv0m0d5moie33ukfb2vluv
  • MS=ms79278451
  • 5j53tavbtdvq5ns1j5uosvl4h
  • google-site-verification=boWuk0ZI--LhVX9X0DUCINfoVfOwOIkONNSgwCd3NIk
Cloud / SaaS Services Detected
HubSpot Microsoft 365

Leak Screenshot:

Leak Screenshot

Other recent victims