Ransomware Group: EVEREST

VICTIM NAME: Philadelphia Investment Partners

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the EVEREST Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

Philadelphia Investment Partners, a United States–based financial services firm, is identified as the victim in the Everest ransomware leak entry. The leak page attributes the incident to the Everest group and notes a compromise date of August 11, 2025. A claim URL is indicated on the page, signaling the attackers’ intent to publicly attribute the breach and to leverage the data. The page also contains 11 image attachments—presumably screenshots or scans of internal documents—presented as evidence of access to the victim’s data. The overall presentation aligns with ransomware data-exfiltration posts, though the provided data does not specify whether encryption occurred.

In terms of evidence, the leak page relies on a set of 11 images, described as screenshots or internal-document visuals. There are no downloadable files listed on the page, and no explicit ransom amount is provided in the data. A claim URL is indicated, reinforcing the post’s function as a publicly visible breach announcement. The entry is associated with the Everest group and targets a United States–based financial services firm, with the leakage content primarily conveyed through imagery rather than an extensive textual narrative. The available metadata offers limited detail about data types or scope beyond the presence of these image attachments.