2026 MSM Unify — Kazu ransomware/extortion claim; ~319k users + passport/visa files (unverified)
Data compromised
Actor claim (unverified): ~319,163 users; passport copies/numbers/photos, birth certificates, visa docs, transcripts, test scores, offer letters, payment receipts, names, DOBs, addresses, phones, emails; $400k ransom / Sep 21 deadline
Technical writeup
Unverified ransomware / extortion claim — indexed September 2026. Kazu listed MSM Unify (Canadian global education platform) claiming ~1.45 TB / ~2.02M files / ~319,163 users including passport and visa application documents, with a $400,000 ransom and September 21, 2026 deadline (Dark Web Informer Sep 7; Ransomware.live; SOCRadar). MSM Unify had not publicly confirmed at catalog time. recordsAffected 319163 from actor claim (unverified); companyConfirmed false.
Root cause
Unverified Kazu ransomware leak-site / extortion listing claiming 1.45 TB stolen from MSM Unify