Egidio

The Threat Laboratory → Experts Entreprendre

🌐 Français

Case file · August 21, 2026

Experts Entreprendre: 1.13TB of accounting and banking data claimed

The Everest ransomware group claims 1.13TB of data stolen from French accounting firm Experts Entreprendre: IBANs, payroll, tax records, ID documents from hundreds of client companies. Not confirmed by the firm.

⚠️ Claimed by a ransomware group, not confirmed by the firm. No public statement from Experts Entreprendre confirming this leak was found at the time of writing. This case file documents a claim, not an established fact.

The numbers

1.13TB
Data volume claimed by the Everest ransomware group, roughly 2.7 million files.
FrenchBreaches, Cyberattaque.org, unconfirmed claim.
630,000+
Tax-related files claimed as stolen.
FrenchBreaches, unconfirmed claim.
280,000
Payroll and HR-related files claimed.
FrenchBreaches, unconfirmed claim.
179,000
Banking, treasury or financing files claimed — including IBANs and bank account details.
FrenchBreaches, unconfirmed claim.

Timeline

CLAIMED
2026
The Everest ransomware group claims to have stolen 1.13TB of data from Experts Entreprendre, a firm specializing in accounting, audit, consulting, payroll and HR. The documents shown include banking, accounting, tax and audit records belonging to different client files.
UNCONFIRMED
Since
Several thousand files are classified by the claimants as ID documents or personal data — ID cards, passports, residence permits, proof of address, documents related to employees and executives. No public confirmation from the firm has been identified to date.

🧾The target is the firm — the victims are its clients

This case file illustrates a distinct pattern: an accounting firm isn't the final target itself, but the access point to hundreds of client-company files. A single intrusion potentially exposes the payroll, tax and banking details of many companies at once — the same principle as a breach via a vendor, applied to the accounting profession.

What it changes for you

If your company or employer is a client of Experts Entreprendre, your payslips, tax data or business bank details could be in the claimed archive — pending confirmation. The main risk is a wire-transfer fraud attempt ("CEO fraud") built on real accounting details, or targeted phishing posing as the firm or the tax administration. See From Leak to Scam.

🔒 Any request for an urgent transfer or updated bank details citing precise accounting details should be verified through an independent channel, especially if it claims to come from your accounting firm or the tax administration.

Frequently asked questions

Is the Experts Entreprendre leak confirmed?

No, not to our knowledge: it's a claim by the Everest group, with no public confirmation from the firm.

What data is claimed?

1.13TB / 2.7 million files: tax records, payroll/HR, banking/treasury, and several thousand ID documents.

Who is affected by this leak?

The firm's client companies and their employees, whose files pass through an accounting firm rather than reaching the general public directly.

📌 Last checked: August 21, 2026. Verifiable information to report: contact@egidio.app.

Related reading

MGP: breached via a vendor Capgemini Engineering: the source-code leak V-Bank Munich: breached via a vendor Global Scam Report 2026
Cite this page Egidio — The Threat Laboratory, "Experts Entreprendre: 1.13TB of accounting and banking data claimed," egidio.app/en/laboratoire/experts-entreprendre-accounting-breach/. Licensed CC BY 4.0.

Free to reuse, including commercially, with attribution. Reuse terms.