A New Extortion Gang Is Naming Companies on the Dark Web and Counting Down to Data Leaks
A newly identified extortion gang called ScarlettGroup is publicly naming companies on a dark web leak site accompanied by countdown timers that pressure targets into negotiating before alleged stolen data is released. Active since September 2026, the group’s operations span multiple industries, but no confirmed breach details, malware deployment, or intrusion methods have been established by researchers at Foresiet. Organizations named by ScarlettGroup are advised to independently verify claims, strengthen access controls, and prepare incident response without relying solely on the gang’s public threats.