Ransom! TSYS (MAY-2026)
A ransomware claim alleges that the Everest threat actor targeted TSYS, a US-based payment solutions company, encrypting systems and exfiltrating data. TSYS, headquartered in Columbus, Georgia, provides payment processing and related services and became a subsidiary of Global Payments following a merger in 2019 #UnitedStates

Incident Details

  • Victim: TSYS
  • Sector: Financial Services
  • Country: US
  • Actor: everest
  • Source: http://ransomocmou6mnbquqz44ewosbkjk3o5qjsl3orawojexfook2j7esad.onion/news/TSYS/
  • Discovered: 2026-05-02T03:54:24.488109+00:00
  • Published: 2026-05-02T03:54:07.933043+00:00

Information

  • TSYS (Total System Services) is a US-based payment solutions company headquartered in Columbus, Georgia.
  • Operates in the financial technology and payment processing industry.
  • Provides services such as credit and debit card processing, merchant services, and payment management solutions to financial institutions, businesses, and consumers worldwide.
  • Became a subsidiary of Global Payments following a merger in 2019.

Disclaimer: This post is based on public claims made by the ransomware group "everest". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.

monitored by: ransomware.live