Here at Pope and Johnson County Title Company Data Breach: Rhysida Ransomware Claim (Nov 2026)
Summary
In the latest cybersecurity news, Here at Pope and Johnson County Title Company — an organization based in US — has fallen victim to a ransomware attack conducted by the group rhysida. This data breach, discovered on 2026-11-03T07:25:30.606864+00:00, underscores the increasing need for proactive cybersecurity defenses as we continue through 2026.
Incident Report
| Attribute | Information |
|---|---|
| Target Organization | Here at Pope and Johnson County Title Company |
| Threat Group | rhysida |
| Summary | Here at Pope and Johnson County Title Company Pope County Title Company – title insurance & escrow agency2,536,208 files, ~784 GBPope County Title Company / Johnson County Title / Carol Collins Law / Principle Escrow / Principle Intermediary (Russellville, AR) is a title agency closing real-estate deals for First American Title Insurance, running escrow trusts and acting as a qualified intermediary for IRS 1031 like-kind exchanges. Power title plant: 591,000-record county registry, 1983�2026 data;SoftPro daily closing documents 2020�2026 plus a SQL backup (fully restored and examined);WordData business documents: 1031 exchanges, escrow registers, HR, taxes, passwords.412 SSNs + 4,549 TaxIDs in the production database; 1,202 buyers/sellers from 2025+; fresh W-2/1099 for all staff (SSN, wages, addresses);scans of passports, driver licenses and Social Security cards of staff and clients;bank portal passwords in plain spreadsheets, plus security answers; Centennial / FSB account numbers, wire instructions, FUND escrow ledgers 2024�2026;owners’ personal finances: joint 1040 returns 2002�2018 (spouses’ SSNs), medical bills, investment accounts, SSA retirement application 12/2024;5th Judicial District criminal-case materials (the owner is a sitting public defender): Cellebrite phone extractions of defendants, jury instructions;law-practice case files: divorces, guardianships, estates. More |
| Date of Breach | 2026-11-03T07:25:08.730302+00:00 |
| Discovery Date | 2026-11-03T07:25:30.606864+00:00 |
| Business Sector | Financial Services |
How to reduce your ransomware risk
Most ransomware intrusions start with a stolen password or a phishing email. A few proactive steps sharply cut your exposure:
- dark web monitoring — close the gap attackers exploit.
- data breach monitoring — close the gap attackers exploit.
Want to know if you’re already exposed? Run a free scan with the HookPhish data breach checker.
Disclaimer
HookPhish does not engage in the exfiltration, downloading, taking, hosting, viewing, reposting, or disclosure of any stolen information. All breach data reported here is sourced from publicly available threat intelligence feeds for awareness purposes only.
Related articles
Ransomware Group Orova Hits: Raffles United Holdings Pte Ltd
Ransomware Group Orova Hits: Hydrogel Vision Corporation
Ransomware Group Orova Hits: MARDEC Berhad
