The rhysida ransomware group listed INTAX, Inc. on its data leak site on 2026-10-29. Sector: Financial Services Domains named: payroll.money Claim as published on the leak site: INTAX, Inc. Complete file server of INTAX, Inc. (Lexington, KY, USA) - a property-tax compliance and bill-pay firm.892,867 files, 1.27 TBClient tax returns: 649,905 PDFs. Clients include AARP, ADT, Pilot Travel Centers, Wendy's, Valvoline, Zions, Raytheon (~100 companies).Client accounting: 100+ QuickBooks company files � full ledgers, banks, payroll.Money: bank account + routing numbers, $910,000 wire form, signed W-9, proof the firm opens dedicated accounts and pays client taxes (~$73.6M/yr mo