Ransomware victim disclosure
← All victimsMLS Now
listed as Northern Ohio Regional Multiple Listing Service · Claimed by akira · listed 9 hours ago
Status timeline
- Listed
Jun 4, 2026
- Data leaked
At a glance
- Group
- akira
- Status
- Data leaked
- Country
- US
- Sector
- Business Services
- Listed on leak site
- Jun 4, 2026
About the victim
AI dossier — public-source company profileMLS Now is a Multiple Listing Service operator serving Northern Ohio that provides technology, data services, and education to real estate professionals. The company offers online documentation, member support, and timely market data.
- Industry
- Real Estate Technology & Services
Attack summary
Severity: high — Confirmed exfiltration of sensitive business data including financial records, board information, and legal documents (NDAs, contracts) that could expose operational and personal information at significant scale.Akira claims to have exfiltrated corporate data including board member information, contracts, NDAs, and detailed financial records. The group states they will publish this data.
Data the group says was taken
AI dossier — extracted from the leak post- Board member information
- Contracts
- NDAs
- Financial records
- Corporate files
What the group claims
MLS Now operates on advanced technology to provide members with timely, accurate, and meaningfu l data and services. The company offers hands-on education, extensive online documentation, and a robust support help desk staffed by local professionals. We will upload corporate data soon. Board members information, contracts, NDAs, detailed financ ials, confidential files, and so on.
Source
Indexed 9 hours agoThis page surfaces a public ransomware disclosure indexed by Darkfield. Original posts come from the operator's own leak site; we cross-check against ransomware.live, RansomLook and RansomWatch where applicable. Share this URL freely.
Is this your supplier? Your competitor? You?
Pro plans monitor your domain, corporate emails, and crypto wallets across every new ransomware leak-site post, breach dump and Telegram callout — alerts within 5 minutes.
