Statement from SpyCloud:

On January 15, 2025, we identified a small portion of the data that SpyCloud recovered from the dark web posted in a public Telegram channel. Within hours, we were able to determine the exact device in a customer’s network where the data originated. We immediately contacted the customer so they could resolve the issue on their side and revoked their access. We are informing affected parties and working with both law enforcement and the customer.