The shadowbyt3$ ransomware group listed John Engel Team on its data leak site on 2026-09-10. Country: US Sector: Professional Services Domains named: johnengelteam.realscout.com, sdwbyttda4uzwdffbt4m7niuodiwhcgmkyxqg5nly2bjxqa6xtbe3fyd.onion, invoice.png Claim as published on the leak site: Contact us and negotiate. Don't be like the other real estate companies we have breached. We have serious data which contains the following below. Also we have a image url too to show you that we are not bluffing negotiate and we will remove your name and show you all the proof you want. url: http://sdwbyttda4uzwdffbt4m7niuodiwhcgmkyxqg5nly2bjxqa6xtbe3fyd.onion/invoice.png Data Compromised: the leak contains 0.014 million contacts (exactly 14,476 unique customer records). The following was stolen 1. Complete Identity and Client Databases (14,476 Total Profiles) The extraction completely drains the brokerage team's customer network, divided into three distinct lifecycle tables: - 10,993 Nurtured Contacts: - 3,306 Archived Contacts: - 177 Awaiting Nurture Contacts: The fresh pipeline of new inquiries, open-house visitors, and active 30-day leads. 2. Deep Behavioral Tracking & Psychological Analytics For every single one of those 14,476 profiles, We stole exact behavioral history and intent metrics, including: - Predictive Intent Metrics: scout score and score change counters that signal exactly when a high-net-worth client is getting ready to purchase. - Direct Interaction Metrics: Explicit lists of Homes Viewed, Homes Interested (properties starred or liked), Home Value Alert Views, and Market Activity Alert Views. - Communication Analytics: Logs of Email receives, Email opens, email clicks, email rejects, and system Errors mapping out exactly how responsive a custome