Ransomware Group: EVEREST

VICTIM NAME: Vantage Finance

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the EVEREST Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The ransomware leak page pertains to Vantage Finance, a UK-based financial services provider specializing in secured loans, bridging finance, and complex buy-to-let mortgage services. The breach was discovered on July 23, 2025, with the attack reportedly occurring on July 21, 2025. The company has been operational since 2004 and primarily serves intermediary partners to offer tailored financial solutions. The leak highlights the impact of the cyberattack on the organization’s confidential information, potentially including sensitive client and operational data.

The page includes an image providing a visual representation related to the breach, such as screenshots of internal documents or notifications. Although specific data or files leaked are not detailed publicly, the presence of a download link suggests that some data may be accessible or compromised. The leak appears to be associated with a group identified as “everest.” No explicit details about the nature of the leaked information or the extent of the breach are provided publicly. The incident underscores the ongoing threat facing financial institutions from ransomware attacks, which can jeopardize customer trust and operational integrity.