Ransomware group Dark Project hits The Excalibur Group
The Excalibur Group — a not found target operating in US has been listed by the Dark Project ransomware group on 2026-10-20. The information below reflects what the threat actor has publicly claimed on their leak site; the details have not been independently verified.
Incident Report
| Target Organization | The Excalibur Group |
|---|---|
| Threat Group | Dark Project |
| Summary | The Excalibur Group in the United States, was listed by the Dark Project ransomware group on its leak site on 2026-10-20. |
| Date of Breach | 2026-10-20 |
| Discovery Date | 2026-10-20 |
| Region | US |
| Target Domain | theexcaliburgroup.com |
| Business Sector | Not Found |
| Severity | MEDIUM |
Claim by Dark Project
About The Excalibur Group The Excalibur Group is a Washington D.C. based company that focuses on enhancing local, state, and federal programs through staff augmentation, training, and program management in the Defense, IT, Workforce, Environmental, and Legal sectors. They provide specialized job training and placement services for individuals in various industries, including transitioning soldiers. The company also offers both permanent and contingent labor to support clients' internal IT and R&D projects. Their mission is to deliver efficient contract management and cost-effective solutions while promoting meaningful Veteran employment. Company The Excalibur Group was attacked, resulting in the theft of more than 600 GB of confidential data, such as banking and other financial information, personal data of employees and customers, and information marked “secret”. Currently, more than 400,000 files are not protected by The Excalibur Group
Posted by the Dark Project threat actor on its public leak site. This is the group's own statement and has not been independently verified by HackerFeeds.
Sources
Victim website
theexcaliburgroup.com
Leak post (onion / Tor)
http://darkprn3d3udnhpuxknsrhft3376lrz5tenhgkrxge5hxqe46pkbrwid.onion/article?slug=the-excalibur-group
Open this URL in Tor Browser. Browsing leak sites carries real risk — view passively, never click further.
Disclaimer
HackerFeeds does not engage in the exfiltration, downloading, taking, hosting, viewing, reposting, or disclosure of any stolen information. All breach data reported here is sourced from publicly available threat intelligence feeds for awareness purposes only.