Researchers Confirm ExfilSquad’s Access to Sensitive Data Across 13 Organizations

ExfilSquad, a data extortion group active since late July, published torrents containing data from 13 organizations (approximately 382.64 GB and 27 million records) across government, education, financial services and manufacturing. Fortra’s analysis indicates the breaches resulted from unauthorized read access to Microsoft D365/Dataverse exports—likely via misconfigured Microsoft Power Pages allowing public API/table read access—leading to exposed PII (including ~60,000 student records) and subsequent extortion pressure.