Reported by 2 outlets

Timeline

1. original reporting

   ExfilSquad Hackers Leak 382GB of Microsoft D365 Data From 13 Victims

   cyberpress.org · 57d ago · August 17th, 2026

   A new data-extortion group known as ExfilSquad has leaked 382.64GB of data allegedly stolen from 13 organizations using Microsoft Dynamics 365 CRM and ERP environments. The released archive reportedly contains around 27 million records, including personally identifiable information, customer support data, internal business records, and account-related details. Security researchers at Fortra said the group first appeared on July 26, 2026, when it claimed to have obtained data from 15 organizations. The claims initially lacked evidence, but ExfilSquad later published samples and then released larger data archives through torrents after an August 5 deadline passed. On August 7, the group published data linked to 13 alleged victims. The campaign is notable because current evidence does not point to a Microsoft Dynamics 365 software vulnerability or a traditional ransomware intrusion. Instead, researchers believe the attackers may have abused exposed Microsoft Power Pages portals that allowed anonymous users to read Dataverse data. ExfilSquad Leaks D365 Data Fortra’s analysis found that the leaked files appear consistent with data exported from Microsoft Dynamics 365 CRM and ERP systems. Researchers said the available evidence indicates unauthorized access to SaaS-hosted data rather than a full compromise of each victim’s internal network. There was no observed evidence of lateral movement, ransomware encryption, or an exploit affecting Dynamics 365 itself. The group’s published v

2. update from gbhackers.com

   Misconfigured Microsoft Power Pages Likely Exposed 27 Million Records to ExfilSquad

   gbhackers.com · 57d ago · August 17th, 2026

   A suspected Microsoft Power Pages configuration failure has been linked to the exposure of roughly 27 million records across 13 organizations, after the data-extortion group ExfilSquad published 382.64 GB of alleged victim data via torrent distribution. Researchers assessing the released material say the evidence points to publicly readable Microsoft Dataverse tables not a zero-day exploit, […] The post Misconfigured Microsoft Power Pages Likely Exposed 27 Million Records to ExfilSquad appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform .