Ransomware victim disclosure
← All victimsCFGI Management (cfgi.com)
Claimed by Hunters International · listed 2 months ago
Status timeline
- Listed
Mar 9, 2026
- Data leaked
At a glance
- Status
- Data leaked
- Country
- United States
- Sector
- Financial Services
- Listed on leak site
- Mar 9, 2026
- Records
- 800K records
About the victim
AI dossier — public-source company profileCFGI (cfgi.com) is a US-based accounting advisory and financial consulting firm serving clients globally from multiple offices worldwide. The firm provides a broad range of services including technical accounting, financial reporting, valuation, tax, forensic accounting, transaction advisory, and restructuring, primarily for CFO offices and private equity clients. CFGI operates across numerous industry verticals including financial services, healthcare, life sciences, and technology.
- Industry
- Accounting & Financial Advisory Services
- Address
- 1185 6th Ave, Midtown Manhattan, New York, NY
Attack summary
Severity: critical — Over 800,000 records containing PII have been confirmed exfiltrated and published from a financial advisory firm whose clients include private equity and CFO-level organizations, representing large-scale regulated data exposure with high potential impact on individuals and institutional clients.Hunters International claims to have exfiltrated over 800,000 records containing PII and other internal corporate data from CFGI, stating that the company failed to reach a ransom agreement. The group has published the data following unsuccessful negotiations.
Data the group says was taken
AI dossier — extracted from the leak post- Personally identifiable information (PII)
- Internal corporate data
- Client records
What the group claims
Over 800k records containing PII and other internal corporate data have been compromised. The company failed to reach an agreement with us despite all the chances and offers we made. They don't care about their clients nor investors. | Updated: 10 Mar 2026 | SHA256: 1dbf6b9a06960cc8c4043de9f94a2494845b96d07a8a14aab89099ced8baef0c
Sources
- Victim sitecfgi.com
Source
Indexed 2 months agoThis page surfaces a public ransomware disclosure indexed by Darkfield. Original posts come from the operator's own leak site; we cross-check against ransomware.live, RansomLook and RansomWatch where applicable. Share this URL freely.
