ExfilSquad has announced new victims in the Wesco data breach, setting a negotiation deadline of August 5, 2026, after which stolen data will be publicly released. The affected organizations include Wesco International, the UK Department for Education Help Portal, Turing Portal, Police National Legal Database, Allstate, TaylorMade, Sun Day Red Golf, Frontier Airlines, District of Columbia Public Schools, Newcastle University, Viavi Solutions, City of Houston, City of Atlanta, and Bonava. Wesco International's breach involves 2.6 million records, while the City of Houston has 6 million records at risk. ExfilSquad uses extortion through data publication on an onion site and has expanded to torrent links for distribution, complicating data removal efforts. On August 7, 2026, they released torrent files for each victim, with active hosts identified in China and Russia. The group also claimed to have breached a bank in Nigeria, although this information later disappeared from their site.