Back to Victim Disclosures

INTAX, Inc.

rhysidaransomware groupintax.com
Ransom deadline in6d 17h 20m 5s
6h ago

Added Oct 29, 2026

Complete file server of INTAX, Inc. (Lexington, KY, USA) - a property-tax compliance and bill-pay firm. 892,867 files, 1.27 TB Client tax returns: 649,905 PDFs. Clients include AARP, ADT, Pilot Travel Centers, Wendy's, Valvoline, Zions, Raytheon (~100 companies). Client accounting: 100+ QuickBooks company files � full ledgers, banks, payroll. Money: bank account + routing numbers, $910,000 wire form, signed W-9, proof the firm opens dedicated accounts and pays client taxes (~$73.6M/yr moved). Identity data: US passports of the owner and employees, driver license, birth certificate, W-2s with SSNs, IRS filings 2025�2026, medical insurance cards. 60+ cleartext password files: US government tax portals + the firm's own QuickBooks. 24,000+ emails, personal employee folders, lawsuit records, owner exit/sale planning.

Leak Page Screenshot

Organization Details

Organization

INTAX, Inc.

Domain

intax.com

intax.com

Leak Data

Data Size

1.27 TB

Published

Oct 29, 2026

Publication Status

Published

Ransom / Auction

11 BTC

Auction Status

for sale

Discovered

Oct 29, 2026

Leak URL
http://rhysidafohrhyy2aszi7bm32tnjat5xri65fopcxkdfxhi4tidsg7cad.onion/archive.php?company=293
Site OnlineLast scanned 1d ago

Threat Group

rhysida

ransomware group

View full group profile →

Quick Facts

Ransom11 BTC
Data Size1.27 TB
AddedOct 29, 2026