The hive ransomware group listed Expand Group on its data leak site on 2022-12-14.