Ransom! Sibbalds

The Rhysida threat actor has claimed to have compromised Sibbalds, a chartered accountancy firm based in Derby, GB, known for delivering diverse accounting services to owner-managed businesses across England. The attack highlights ongoing cybersecurity risks faced by professional service firms in the United Kingdom. #UnitedKingdom

Incident Details

  • Victim: Sibbalds
  • Country: GB
  • Actor: rhysida
  • Source: http://rhysidafohrhyy2aszi7bm32tnjat5xri65fopcxkdfxhi4tidsg7cad.onion/archive.php?company=216
  • Discovered: 2025-10-16 09:46:47.751488
  • Published: 2025-10-16 09:46:27.662843

Information

  • Ransomware attack targeted Sibbalds Chartered Accountants.
  • The incident involved the threat actor Rhysida.
  • Sibbalds is based in Derby, England.
  • The firm provides a wide range of accountancy services to owner-managed businesses across England.

Disclaimer: This post is based on public claims made by the ransomware group "rhysida". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.

monitored by: ransomware.live