A public breach analysis centred on a bespoke “Luna Moth Files” site has raised questions about whether Silent Ransom Group (SRG) was actually involved in a leak or if the material is fabrication. DataBreaches[.]net notes that, while initial analyses suggested the data appeared real, this could not be conclusively proven.
Independent researchers tracked money flows with Crystal Intelligence and Chainalysis, finding some wallet-payment linkages but not definitive proof that payments corresponded to specific attacks or to particular victims.
The publication by DataBreaches[.]net involved victim data and alleged payments spanning 25 August 2025 to 29 September 2026. They observed some consistency between chats, offers, and previously seen screenshots, but highlighted inconsistencies such as purported higher offers on SRG’s leak site compared with the messages they had obtained.
Nine of 27 victims named in the messages who reportedly paid ransoms publicly disclosed incidents consistent with SRG activity, yet no law firm had confirmed paying SRG, or the amounts involved. SRG told DataBreaches that they had never been hacked and that the leaked material was not compiled or reported by their group, suggesting possible manipulation by others or false articles.
DataBreaches’ follow-up attempts with SRG did not yield a detailed corroboration of the leak’s authenticity. SRG stated they conducted a security audit and suggested external entities might be damaging their reputation. As of the report, verification remained ongoing, with investigators urged to examine the primary material themselves. The article emphasizes that it cannot yet confirm exploitation or attribution, and notes that SRG’s stance contrasts with earlier reporting and cross‑references.