Moses & Singer Data Breach

Moses & Singer, a professional services firm based in the United States, was identified on August 2, 2026, as a claimed victim of the Silent Ransom Group. SOCRadar’s Dark Web Monitoring service detected the listing on the extortion group’s portal. The company operates within the professional services sector in the United States. This particular listing is notable as it appears to be one of the earliest claimed victims associated with Silent Ransom Group’s recorded activity, rather than being part of a larger, ongoing campaign. In the 60 days preceding this listing, Silent Ransom Group had claimed only one other victim. The tracked targeting from this group has so far been concentrated within the Professional Services industry, though the sample size is too small to establish a definitive pattern. The previously identified victim was also based in the United States, mirroring the geographic and sectoral alignment seen with Moses & Singer. However, given the limited number of claimed victims, this overlap offers minimal insight into the group’s typical targeting strategies.

SOCRadar’s analysis of initial access correlations, cross-referenced with stealer-log telemetry, revealed a significant exposure associated with the mosessinger[.]com domain. Three records were identified containing @mosessinger.com email addresses. These records were linked to third-party consumer and

This report is intended for threat intelligence and security awareness purposes. SOCRadar does not host, redistribute or buy stolen data. All breach information reported here is collected from publicly accessible threat actor and ransomware portals. This content is intended to equip CTI teams with context around recent attacks. While we strive for accuracy, listings on ransomware leak and extortion sites cannot always be independently verified and may not reflect confirmed breaches. If you believe any data in this report is incorrect, please contact us.