Onyx Equities Hit by CL0P Ransomware Attack, Exposing Sensitive Data
Onyx Equities LLC, a New Jersey-based real estate investment and property services firm, has fallen victim to a ransomware attack by the CL0P cybercriminal group. The breach was first disclosed on the dark web on January 21, 2026, with attackers claiming to have exfiltrated company data. Onyx later reported the incident to the Massachusetts Attorney General’s office on April 2, 2026, confirming that six Massachusetts residents were affected.
The exposed data includes social security numbers and names, though details on how or when the breach occurred remain unclear. Onyx Equities, founded in 2004, manages over $2.3 billion in real estate assets across New Jersey, New York, Pennsylvania, and Connecticut, with a portfolio exceeding 65 million square feet.
The law firm Shamis & Gentile P.A. is investigating the breach on behalf of affected individuals, who may be eligible for compensation through potential class action litigation. The incident underscores the growing threat of ransomware attacks targeting corporate data, particularly in sectors handling sensitive personal information.
Source: https://www.claimdepot.com/investigations/onyx-equities-data-breach-2026
Onyx Equities cybersecurity rating report: https://www.rankiteo.com/company/onyx-equities
"id": "ONY1775162754",
"linkid": "onyx-equities",
"type": "Ransomware",
"date": "1/2026",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '6 Massachusetts residents',
'industry': 'Real Estate',
'location': 'New Jersey, USA',
'name': 'Onyx Equities LLC',
'size': 'Manages over $2.3 billion in real estate '
'assets, portfolio exceeding 65 million square '
'feet',
'type': 'Real estate investment and property services '
'firm'}],
'data_breach': {'data_exfiltration': 'Yes',
'personally_identifiable_information': 'Social security '
'numbers, names',
'sensitivity_of_data': 'High',
'type_of_data_compromised': 'Personally Identifiable '
'Information (PII)'},
'date_detected': '2026-01-21',
'date_publicly_disclosed': '2026-04-02',
'description': 'Onyx Equities LLC, a New Jersey-based real estate investment '
'and property services firm, has fallen victim to a ransomware '
'attack by the CL0P cybercriminal group. The breach was first '
'disclosed on the dark web on January 21, 2026, with attackers '
'claiming to have exfiltrated company data. Onyx later '
'reported the incident to the Massachusetts Attorney General’s '
'office on April 2, 2026, confirming that six Massachusetts '
'residents were affected. The exposed data includes social '
'security numbers and names.',
'impact': {'data_compromised': 'Social security numbers, names',
'identity_theft_risk': 'High'},
'investigation_status': 'Ongoing (investigated by Shamis & Gentile P.A.)',
'ransomware': {'data_exfiltration': 'Yes', 'ransomware_strain': 'CL0P'},
'references': [{'date_accessed': '2026-01-21',
'source': 'Dark web disclosure'},
{'date_accessed': '2026-04-02',
'source': 'Massachusetts Attorney General’s office report'}],
'regulatory_compliance': {'legal_actions': 'Potential class action litigation',
'regulatory_notifications': 'Massachusetts Attorney '
'General’s office'},
'response': {'law_enforcement_notified': 'Massachusetts Attorney General’s '
'office',
'third_party_assistance': 'Shamis & Gentile P.A. (law firm '
'investigating the breach)'},
'threat_actor': 'CL0P',
'title': 'Onyx Equities Hit by CL0P Ransomware Attack, Exposing Sensitive '
'Data',
'type': 'Ransomware'}