Hum & Jacoby Data Breach

Hum & Jacoby, a business services firm based in the United States, has been named as a victim on the qilin ransomware group’s dark web portal, as published on July 9, 2026. Identified by SOCRadar’s Dark Web Monitoring service, the company operates in the CPA/accounting sector, a field frequently targeted by qilin. This incident aligns with the ransomware group’s consistent focus on small and mid-sized businesses in the US.

Analysis of SOCRadar’s stealer-log telemetry for the 60 days preceding the listing revealed no records for hhjcpas.com. However, this null result does not definitively clear the company, as limited visibility, alternate domains, or credentials used under personal email aliases could obscure access. Small professional-services firms often have a minimal presence in stealer feeds, making a negative query a weak indicator of security. Ransomware groups like qilin commonly exploit credentials obtained from infostealer logs to gain initial access through platforms such as Microsoft 365, VPNs, or remote-access portals. While no direct evidence was found in this specific query, CTI teams are advised to maintain continuous monitoring and enforce strong credential hygiene rather than relying on the absence of immediate findings.

Disclaimer

This report is intended for threat intelligence and security awareness purposes. SOCRadar does not host, redistribute or buy stolen data. All breach information reported here is collected from publicly accessible threat actor and ransomware portals. This content is intended to equip CTI teams with context around recent attacks. While we strive for accuracy, listings on ransomware leak and extortion sites cannot always be independently verified and may not reflect confirmed breaches. If you believe any data in this report is incorrect, please contact us.