The Adaptavist Group disclosed work with incident responders after March 2026 intrusions leveraged stolen passwords while The Register documented parallel TheGentlemen ransomware-page boasts about voluminous hauls—including references to prized Atlassian-adjacent source trees.
Vendors pleaded statistical humility—ransom crews routinely turbocharge narratives—yet impostor customer emails proved real enough to warrant phishing vigilance irrespective of forensic finality.
Canonical record: Adaptavist Group 2026 incident on BreachHistory.
Sources: The Register, CEO letter