Ransomware Group: EVEREST

VICTIM NAME: Grayscale Investments

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the EVEREST Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The ransomware leak page reports that the victim is Grayscale Investments, a prominent digital currency asset management firm based in the United States. The breach was discovered on July 31, 2025, and involves sensitive data potentially related to the company’s operations in digital asset management. The company specializes in managing large Bitcoin portfolios, including popular investment products such as the Grayscale Bitcoin Trust. The leak information does not specify the exact nature of the compromised data but suggests a breach related to the company’s digital currency activities.

The leak includes visual evidence, notably a screenshot that appears to show internal documents or related content, which raises concerns about the security of internal communications or data. It is important to note that no personally identifiable information or specific client data has been disclosed publicly in the leak summary. The breach is claimed to be associated with the group ‘everest,’ indicating a possible orchestrator or threat actor. The leak’s claim URL points to an .onion site, emphasizing its presence on the dark web.