Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us

Beacon Mutual Insurance

beaconmutual.com

Discovered 2026-01-31 00:31 UTC
Est. attack date 2026-01-31
Country US
Sector
Agriculture and Food Production Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Description:

MAJOR DATA LEAK – Beacon Mutual Insurance Company EXPOSED: 275 GB (296,228,795,086 bytes) of highly sensitive internal data Beacon Mutual Insurance Company (Warwick, RI) – the primary workers' compensation insurer for Rhode Island businesses (also operating in MA & CT) – has suffered a massive data compromise. The leaked archive contains approximately 275 GB of uncompressed/internal files and includes the following categories of highly confidential information: Internal corporate documents and correspondence Complete financial statements and reports (2018–2025) Full employee list with personal details Confidential agreements, NDAs, vendor contracts, and partnership documents Detailed claims data: workers' compensation payouts, injury reports, medical records tied to claims Client / policyholder database: business information, insurance policies, payment history Personally identifiable information (PII) of individuals (employees, claimants, insured workers) – names, SSNs, addresses, dates of birth, contact details, etc. Training materials, internal manuals, compliance & safety documentation Multiple system backups and database dumps …and much more internal operational content

Infostealer activity detected by HudsonRock

Compromised Employees: 0

Compromised Users: 5

Third Party Employee Credentials: 0


External Attack Surface: 3


DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • No emails found.
MX Records
  • us-smtp-inbound-2.mimecast.com. Mimecast
  • us-smtp-inbound-1.mimecast.com. Mimecast
TXT Records
  • apple-domain-verification=OQbQGHrC0p8tynzc
  • 59mw386fd8rmm46wdtq7z58x9clc18z2
  • atlassian-domain-verification=yiPKurXUgJLRr0FQXCsEuY3Y3duwGULOe7CTpXAZDO9Kfzv7HXvqaOLpaW2fS7OJ
  • dx28y78rkrl8zcxf3mld9zq0c19929b2
  • v=spf1 ip4:3.210.102.244 ip4:68.171.144.0/24 ip4:204.148.141.98 ip4:98.191.10.0/24 ip4:104.198.3.211 include:_netblocks.mimecast.com include:origamirisk.com include:5115678.spf10.hubspotemail.net include:relay.mailchannels.net ~all
  • MS=ms15669384
  • 0ed1fe018a2c131a0d89394eeca146a3550614aa70
  • adobe-idp-site-verification=d200d707aa3a4697dfa24b547505823c9e95de16796d446b0057685ee5963ea3
  • ZOOM_verify_oNW94GXgSKCdvHhE4lMVrQ
  • _j05fbpzrs5ehinw9gp2jr4c6w30fxq3
Cloud / SaaS Services Detected
Adobe Apple Atlassian HubSpot Microsoft 365 Mimecast Zoom

Leak Screenshot:

Leak Screenshot