ExfilSquad surfaced on tracking systems on July 26, 2026 and claimed 18 victims within four days, an unusually dense burst for a newly listed group. The claimed victim list spans government bodies (City of Atlanta, City of Houston, UK Department for Education, a police-linked legal database), a major technology vendor (Microsoft), and private-sector names including Wesco International, Bonava, and Allstate, indicating no clear sector or geographic focus so far and instead a scattershot targeting pattern across the US, UK, and beyond. No sector, country, or MITRE ATT&CK technique data has been catalogued for this actor yet, so claimed intrusion methods and post-compromise behavior remain unconfirmed. The group's rapid, high-profile claim volume in its first week is itself the notable data point; none of the claims listed here have been independently verified, and the group's own self-description is not on file.