Valley Banks
valleybanks.com
Group
Akira
Discovered
2025-11-14 14:41 UTC
Est. attack date
2025-11-14
Country
Sector
Agriculture and Food Production
Education
Energy & Utilities
Financial Services
Government & Defense
Healthcare
Hospitality
Manufacturing
Other
Professional Services
Retail & E-Commerce
Technology
Transportation
Description:
Valley Bank is a state chartered community bank, with branches in
Ronan, Arlee, Hot Springs, Thompson Falls, Pablo, Polson and Sai
nt Ignatius.
We will upload 294gb corporate documents soon. Employee informati
on (scanned passports, driver licenses, hr docs with DOB, phones,
addresses, credit card details and so on), contracts and agreeme
nts, NDAs, and other client's files, etc.
DNS Records:
The following DNS records were found for the victim's domain.
WHOIS Emails
- abusegodaddy.com
MX Records
- valleybanks-com.mail.protection.outlook.com. Microsoft 365
TXT Records
- v=spf1 mx a ip4:35.209.200.18 ip4:206.183.125.234 include:mxlogic.net include:spf.protection.outlook.com include:valleybanks.com.spf.auto.dnssmarthost.net include:spf.cashedge.com include:spf.myconnectwise.net v=spf1 ip4:67.210.88.0/24 ip4:63.156.189.0/24" " ip4:68.232.131.237 ip4:68.232.137.69 ip4:68.232.141.148 ~all
- MS=ms54628813
- knowbe4-site-verification=2a11b77dbd4a676b5bfc802bce67aca9
Cloud / SaaS Services Detected
KnowBe4
Microsoft 365
Legal Disclaimer: Ransomware.live does not engage in the acquisition, exfiltration, downloading, possession, hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data. This platform indexes only publicly visible information posted by ransomware operators and open web sources without accessing or obtaining the underlying stolen content. The service is provided to support public awareness, legitimate research, and cyber-resilience. No stolen personal or confidential data is collected or distributed via this site.