fulcrumsec
Known ransomware group ACTIVE Currently active
FulcrumSec is a data extortion group active since approximately September 2025, specializing in high-speed exfiltration of cloud-hosted databases by exploiting unrotated API keys and misconfigured cloud permissions rather than deploying encryption, with known victims including Australian fintech youX and LexisNexis.
2
Total Claims
0
Critical
—
Records Claimed
2
Industries Hit
Active span: May 1, 2026 – Jun 10, 2026 · 2 organizations targeted
Currently active
Actor Threat Profile
Activity Timeline
Peak: May 2026 (1)May 2026
LessMore
Jun 2026Share this profile
Top Targeted Industries
Education 1
Technology 1
Tradecraft & Infrastructure
0
Documented tools
0 / 0
MITRE tactics / techniques
4
Known leak sites