Ransomware claim: INTAX, Inc. (rhysida)

INTAX, Inc.
Complete file server of INTAX, Inc. (Lexington, KY, USA) – a property-tax compliance and bill-pay firm.892,867 files, 1.27 TBClient tax returns: 649,905 PDFs. Clients include AARP, ADT, Pilot Travel Centers, Wendy’s, Valvoline, Zions, Raytheon (~100 companies).Client accounting: 100+ QuickBooks company files � full ledgers, banks, payroll.Money: bank account + routing numbers, $910,000 wire form, signed W-9, proof the firm opens dedicated accounts and pays client taxes (~$73.6M/yr moved).Identity data: US passports of the owner and employees, driver license, birth certificate, W-2s with SSNs, IRS filings 2025�2026, medical insurance cards.60+ cleartext password files: US government tax portals + the firm’s own QuickBooks.24,000+ emails, personal employee folders, lawsuit records, owner exit/sale planning.

More

  • Group: rhysida
  • Discovered: 2026-10-29 14:39 UTC

This entry reflects a claim published by an extortion group and collected by a public tracker. It has not been independently verified.

Source: RansomLook — Recent Posts · 2026-10-29