INTAX, Inc. Data Breach: Rhysida Ransomware Claim (Oct 2026)
Summary
In the latest cybersecurity news, INTAX, Inc. — an organization based in US — has fallen victim to a ransomware attack conducted by the group rhysida. This data breach, discovered on 2026-10-29T14:14:29.488392+00:00, underscores the increasing need for proactive cybersecurity defenses as we continue through 2026.
Incident Report
| Attribute | Information |
|---|---|
| Target Organization | INTAX, Inc. |
| Threat Group | rhysida |
| Summary | INTAX, Inc. Complete file server of INTAX, Inc. (Lexington, KY, USA) – a property-tax compliance and bill-pay firm.892,867 files, 1.27 TBClient tax returns: 649,905 PDFs. Clients include AARP, ADT, Pilot Travel Centers, Wendy’s, Valvoline, Zions, Raytheon (~100 companies).Client accounting: 100+ QuickBooks company files � full ledgers, banks, payroll.Money: bank account + routing numbers, $910,000 wire form, signed W-9, proof the firm opens dedicated accounts and pays client taxes (~$73.6M/yr moved).Identity data: US passports of the owner and employees, driver license, birth certificate, W-2s with SSNs, IRS filings 2025�2026, medical insurance cards.60+ cleartext password files: US government tax portals + the firm’s own QuickBooks.24,000+ emails, personal employee folders, lawsuit records, owner exit/sale planning. More |
| Date of Breach | 2026-10-29T14:13:34.393971+00:00 |
| Discovery Date | 2026-10-29T14:14:29.488392+00:00 |
| Business Sector | Financial Services |
How to reduce your ransomware risk
Most ransomware intrusions start with a stolen password or a phishing email. A few proactive steps sharply cut your exposure:
- real-time breach alerts — close the gap attackers exploit.
- phishing simulations — close the gap attackers exploit.
Want to know if you’re already exposed? Run a free scan with the HookPhish data breach checker.
Disclaimer
HookPhish does not engage in the exfiltration, downloading, taking, hosting, viewing, reposting, or disclosure of any stolen information. All breach data reported here is sourced from publicly available threat intelligence feeds for awareness purposes only.
Related articles
Ransomware Group qilin Hits: W Interactive
Ransomware Group qilin Hits: Udima
Ransomware Group qilin Hits: Proterial
