Premier HVAC and Refrigeration Data Breach

Premier HVAC and Refrigeration, a United States-based company operating in the professional services sector, was listed on the M3RX ransomware group’s leak portal on July 26, 2026. SOCRadar’s Dark Web Monitoring service identified this listing, which signifies the group’s claim to possess the company’s data and its intention to publish it as leverage. The listing itself does not constitute independent confirmation of a data breach. This incident marks the ninth victim claimed by M3RX within the last 60 days, placing Premier HVAC and Refrigeration within a pattern of targeted entities. M3RX has demonstrated a low operational volume, claiming nine victims over a 60-day period, with a geographically dispersed victimology and no distinct operational base. The professional services sector, Premier HVAC and Refrigeration’s industry, is the group’s second-most targeted sector with two victims, following business services which has seen three claimed victims, and one in manufacturing. The United States leads in the number of claimed victims with four, while Portugal and Germany each have one. Recent similar claims by M3RX include CreateInfor, a Portuguese company, alongside WRT World Enterprises, FORECON Inc., and Marin/Goodman LLP. The targeting of a U.S. professional services firm aligns with M3RX’s established

This report is intended for threat intelligence and security awareness purposes. SOCRadar does not host, redistribute or buy stolen data. All breach information reported here is collected from publicly accessible threat actor and ransomware portals. This content is intended to equip CTI teams with context around recent attacks. While we strive for accuracy, listings on ransomware leak and extortion sites cannot always be independently verified and may not reflect confirmed breaches. If you believe any data in this report is incorrect, please contact us.