THREAT OPS › Threat News › [play] Preferred Financial Group posted to leak site
[play] Preferred Financial Group posted to leak site
Ransomware group: play Victim: Preferred Financial Group Victim website: preferredfinancial.com Sector: Financial Services Country: US Discovered: 2026-08-04T16:25:36.400674+00:00 Leak-site post: http://j75o7xvvsm4lpsjhkjvb4wl2q6ajegvabe6oswthuaubbykk4xkzgpid.onion/topic.php?id=viSDXILZNN4WA Description: United States Note: leak-site listings typically precede public disclosure.
Attributed threat actors
- PlayG1040
Indicators of compromise
- preferredfinancial.comdomain
- http://j75o7xvvsm4lpsjhkjvb4wl2q6ajegvabe6oswthuaubbykk4xkzgpid.onion/topic.php?id=viSDXILZNN4WAurl