Here at Pope and Johnson County Title Company

This record is a provider-reported ransomware claim attributed to rhysida. It is an allegation and has not been independently confirmed.

Claim context

Provider-reported sector
Financial Services
Group-published claim date
First tracked
Last observed
Monitoring providers
3
Independent monitoring providers
3
Website
popecountytitle.com
Post URL
https://cybercrime.works/leaks/c4b508bf-638a-4d8b-9274-7fc389ea4fe7
Data source
unified
Duplicate records merged
2

Provider observation timeline

Newest observations first. Provider observations are not independent confirmation of an incident.

  1. Monitoring provider: observed ; source-published ; retrieved .
  2. Monitoring provider: observed ; source-published ; retrieved .
  3. Monitoring provider: observed ; source-published ; retrieved .

Provider records

Every stored provider record behind this claim, newest first.

  1. Provider credit
    ransomware.live
    Provider URL
    https://www.ransomware.live/
    Feed id
    privtools-ransomposts
    Provider record id
    derived-sha256:804702bf4c10d5f68bf8eced406f6a94091784e95f4b14d2c0b642aa2dee1e9a
    Observed
    Source-published
    Retrieved
    Format
    json-array
    Transport
    https-json
    Overlap class
    primary
    Independent corroboration
    yes
  2. Provider credit
    RansomLook
    Provider URL
    https://www.ransomlook.io/
    Feed id
    ransomlook
    Provider record id
    derived-sha256:441ba3e5436da6e1031c4cc59441d5a4bf5a292055dc160ddc0ca62d46ad19cd
    MISP event UUID
    b2c1bdcf-fceb-50c9-a364-8f8fbb1f7a3d
    Observed
    Source-published
    Retrieved
    Format
    json-array
    Transport
    https-rest
    Overlap class
    primary
    Independent corroboration
    yes
  3. Provider credit
    cybercrime.works
    Provider URL
    https://cybercrime.works/leaks/c4b508bf-638a-4d8b-9274-7fc389ea4fe7
    Feed id
    cybercrime-works
    Provider record id
    c4b508bf-638a-4d8b-9274-7fc389ea4fe7
    Observed
    Source-published
    Retrieved
    Format
    paginated-rest
    Transport
    https-rest
    Overlap class
    primary
    Independent corroboration
    yes

Tracker record history

Newest entries first. These dates describe tracker records, not attack dates.

  1. Provider update: recorded ; associated provider observation .
  2. Provider update: recorded ; associated provider observation .
  3. Initial tracker record: recorded ; associated provider observation .