Threat Group Profile
fulcrumsec
Dormant / historical
Victim claims
25
First seen
Dec 2025
Last activity
10 Jun 2026
Tracked since
—
Group overview
FulcrumSec is a data extortion group active since approximately September 2025, specializing in high-speed exfiltration of cloud-hosted databases by exploiting unrotated API keys and misconfigured cloud permissions rather than deploying encryption, with known victims including Australian fintech youX and LexisNexis.
Preferred targets
Technology · 6
Business Services · 5
Healthcare · 3
Consumer Services · 3
Financial Services · 2
Education · 1
Most targeted countries
US · 13
GB · 2
IN · 2
SG · 1
DK · 1
MX · 1
