The monti ransomware group listed Phoenix on its data leak site on 2025-03-04. Claim as published on the leak site: Full leak