Alleged Sale of Access to an Unidentified Insurance Company in USA

🏢 About the Victim

The victim is an unidentified U.S.-based Insurance company, reportedly with more than 14 offices and over 1,500 machines connected to its network. The company’s income is claimed to exceed $700 million.

⚠ Disclaimer

This report includes actual screenshots and/or text that may include unredacted personally identifiable information (PII) gathered from publicly available sources.
The sensitive information presented within this report is intended solely for cybersecurity awareness and threat intelligence purposes.

📌 Overview

On August 21, 2025, a threat actor known as MustF4st advertised unauthorized access for sale to a U.S.-based insurance company.

The actor claimed the access includes NetExtender and RDP with both Local Admin and Domain Admin privileges. Additionally, the company’s environment allegedly has CrowdStrike security deployed and Veeam backups (28TB).

The dataset was priced at $8,000 USD, with access to sensitive systems, databases, and developer/tester machines across the infrastructure.

📊 Key Details