Back to all incidents

Noelker and Hull

noelkerandhull.com
EMERGING

Noelker and Hull was listed on the Rhysida ransomware extortion leak portal. Threat actor claims exfiltration of 26 GB of internal data files.

Observable Status EMERGING
Industry / Sector Professional Services
Incident Classification Network Intrusion & Data Exfiltration
Attributed Threat Actor Rhysida
Affected Population 41 records
First Seen 2026-10-28
Last Updated 2026-10-28
Authentication Credentials
OPEN WEIGHTS TELEMETRY • DETERMINISTIC CONFIDENCE

Confidence & Source Corroboration

17% CONFIDENCE
1. Primary Authority UNVERIFIED CLAIM Base weight: 6%
2. Evidence Specificity +11% Domain & Scope Telemetry
3. Corroboration Curve +0% 1 independent domain
4. Timeline & Staleness +0% 1 milestone logged
Corroborated Source Domains:
ransomware.live

Technical Forensic Briefing

Incident Overview

Noelker and Hull, operating within the Professional Services sector, has been subject to a cybersecurity incident. Ground-truth telemetry indicates the threat activity is attributed to threat actor Rhysida.

Noelker and Hull was listed on the Rhysida ransomware extortion leak portal. Threat actor claims exfiltration of 26 GB of internal data files.

Compromised Assets & Data Scope

Current disclosures quantify the affected population at approximately 41 records/individuals. Primary affected online infrastructure and perimeter domains include noelkerandhull.com.

Specific classes of compromised records, credentials, or proprietary information continue to be audited through ongoing forensic investigation.

Authoritative Directives & Vendor Disclosures

  • Continuous Telemetry Monitoring: Formal statutory regulatory filings (SEC Form 8-K, State AG portals) and sovereign agency advisories (CISA, NCSC) are continuously monitored via automated ingestion pipeline.

Milestone Timeline (1 events logged)

2026-10-28 16:59 UTC
UNVERIFIED CLAIM

Noelker and Hull Listed on Rhysida Ransomware Extortion Portal

Have updated information or a new verifiable source?

This incident record is a flat Markdown file tracked in Git. Propose an update or add a milestone via Pull Request.

Propose Update via GitHub