soft-inc.com Listed by m3rx Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On May 17, 2026, the ransomware group m3rx listed soft-inc.com on its leak site and stated that it had taken 49.8 gigabytes of data in 9,289 files. The organization is an established technology consulting and professional staffing firm based in New York City. The number of individuals whose information may be involved is not known, and no confirmation or additional details have been released by the company. This incident reflects a continuing pattern in which ransomware operators target firms that provide services to larger enterprises, where access to internal systems can yield business records and contact information.

What happened

The only public information comes from the m3rx listing itself. It asserts that internal files were exfiltrated during a ransomware attack. No date for the intrusion, no description of the initial access method, and no statement on whether encryption was also deployed have been disclosed. The scale is described solely by the reported volume and file count.

Who is m3rx?

m3rx is a ransomware group that maintains a leak site to publish names of organizations from which it claims to have stolen data. Groups of this type typically combine encryption of systems with the threat of releasing stolen material if a ransom demand is not met. Public records show similar operators have targeted companies across multiple sectors in recent years, though specific claims made by m3rx about soft-inc.com remain unverified beyond the listing.

soft-inc.com and its sector

SOFT Inc., operating as soft-inc.com, was founded in 1981 and is headquartered in New York City. It provides technology consulting, IT services, and professional staffing, placing engineering and technical personnel with Fortune 500 clients across the United States. Organizations in this sector routinely hold client project documentation, vendor agreements, employee records, and communications that support large-scale technology deployments.

The information in question

The listing states that internal files were taken. The precise categories of data within those files have not been published. Firms of this type commonly maintain records that include employee contact details, client project information, and contractual documents, but the exact contents of the 9,289 files remain unconfirmed.

The real-world impact

Individuals whose records appear in the stolen material could face risks of targeted phishing or misuse of personal or professional contact information. For the organization, exposure of internal files may affect client relationships and require review of security controls and incident response procedures. Because the number of affected people is unknown, the full scope of potential follow-on activity cannot yet be assessed.

What to do if you're exposed

Monitor email accounts and professional contact points for unusual messages. Review any recent password resets or account activity and enable multi-factor authentication where available. Individuals can run a free exposure scan of their email address against known breach data to determine whether their information has appeared in public listings from incidents such as this one.

AICompiled with AI assistance from public sources and published under our editorial standards.