Photonic Listed by mnt6 Ransomware Group: Ransomware Claim — What’s Alleged & What To Do
Photonic was listed by the mnt6 ransomware group on May 02, 2026, with internal files reported as exfiltrated. Individuals are advised to check whether their information was exposed and take appropriate protective steps.
People connected to Photonic may face uncertainty after the organisation appeared on a listing associated with the mnt6 ransomware group on 2 May 2026. The number of individuals whose information could be involved remains unknown, and the precise contents of any material taken have not been confirmed publicly. In sectors that handle advanced technical work, such incidents can expose internal records whose sensitivity is difficult to assess from outside.
What happened
The incident centres on a claim by the mnt6 group that it listed Photonic following the exfiltration of internal files during a ransomware attack. No figure for the volume of data or the number of people affected has been released. The date the listing appeared is recorded as 2 May 2026; further details on the method of access or the timeline of events have not been disclosed.
Who is mnt6?
mnt6 is a ransomware operator that, like similar groups, typically claims to encrypt systems and remove copies of files before publishing victim names on a leak site. These actors use the public listing as leverage in negotiations. The appearance of Photonic on the site constitutes the group’s claim; independent confirmation of the underlying events has not been provided in the available information.
Who is Photonic?
Photonic develops scalable, distributed and fault-tolerant quantum computing and networking technologies, including work on silicon spin qubits and telecom-compatible interfaces. The company reports revenue of $32.6 million. Organisations in this field routinely manage proprietary research data, engineering specifications and partnership records that can carry commercial or security implications if disclosed.
What data was at risk
The only category named is internal files exfiltrated during the ransomware operation. The exact nature of those files has not been published. Companies working on quantum technologies commonly retain design documents, test results, supplier information and employee records, yet it is not confirmed whether any of these categories were among the material referenced in the listing.
The real-world impact
Where internal technical files are involved, affected organisations can face loss of competitive advantage or the need to review access controls and intellectual-property protections. For individuals, any personal details contained in those files could increase exposure to targeted scams or identity misuse, though the presence of such details remains unverified. The organisation itself may incur costs related to investigation, remediation and any regulatory notifications required under applicable data-protection rules.
Were you affected?
Because the scope of exposed information is not yet clear, individuals can take practical steps to limit further risk.
- Monitor official statements from Photonic for any guidance on notification or support.
- Review recent account activity on services that may share data with technology partners.
- Run a free exposure scan of your email address against known breach repositories to check for prior appearances of your information.
AICompiled with AI assistance from public sources and published under our editorial standards.
How this breach connects
More recent breaches
Silfab Solar Listed by mnt6 Ransomware GroupMcKay Listed by mnt6 Ransomware Groupwww.northern-access.com Listed by krybit Ransomware GroupKlue.com Listed by Icarus Ransomware GroupLatest breaches
Read GalaxyWarden’s full analysis of the Photonic Listed by mnt6 Ransomware Group →
Publicly posted by mnt6 — unverified claim, pending independent verification
Breach listings — particularly those originating from ransomware or leak sites — are third-party claims that may be unverified, incomplete, or inaccurate. A listing does not by itself confirm that a breach occurred or that any specific data was exposed. Severity is an automated assessment, not a definitive rating. Verification status is shown where available.
Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. This information is aggregated from public sources for awareness only and is not legal, security, or investment advice.