FulcrumSec

A financially motivated data-theft and extortion group active since late 2025. It emphasizes rapid exfiltration from cloud and internet-facing enterprise environments, reportedly exploiting exposed applications, API keys, and misconfigured permissions, and generally pressures victims through leak threats rather than widespread encryption.