A ransomware group calling itself Vexy Ransomware claims to have carried out an attack on Sancity Soft Touch, with the claim reportedly posted to the group’s dark web leak site on or around September 4, 2026. This claim was identified and cataloged by ransomware.live, a security research platform that monitors ransomware groups’ public leak sites, and has not been independently verified by BreachLetter. At this stage, the claim represents a statement made by a criminal group on its own extortion portal, not a confirmed security incident.
What we know — and don’t
- A group identifying itself as Vexy Ransomware has listed Sancity Soft Touch on its leak site, with the claimed date of the alleged attack given as September 4, 2026.
- Sancity Soft Touch operates in a sector categorized broadly as ‘other,’ and no further detail about the nature of its business operations has been provided in connection with this claim.
- The specific types of data the group claims to have obtained — such as customer records, employee information, or financial details — have not been disclosed by the group and have not been confirmed by any independent source.
- Sancity Soft Touch has not issued a public statement confirming or denying that an incident occurred.
- No regulator or data protection authority has confirmed this incident as of this writing.
What should you do if you have an account with this company?
- Change your password for any account associated with Sancity Soft Touch, and avoid reusing that password on other sites.
- Enable two-factor authentication (2FA) wherever it is offered, particularly for email and financial accounts.
- Be cautious of unexpected emails, texts, or calls referencing this company, as attackers often use claimed breaches to launch targeted phishing attempts.
- Monitor your financial statements and credit reports for any unfamiliar activity in the coming weeks.
- Consider using an identity monitoring service such as a service like Aura or LifeLock to get alerted early if your personal information appears somewhere it shouldn’t.
- Keep an eye on official communications from Sancity Soft Touch in case they issue a statement about this claim.
BreachLetter will update this page if Sancity Soft Touch confirms this incident, if new details emerge, or if the matter is officially reported to a data protection regulator.