Attorneys at Almeida Law Group are investigating whether a class action lawsuit can be filed on behalf of individuals affected by a possible Quest Group data breach. According to dark web monitoring sources, a hacker group calling itself anubis claimed responsibility for a cyberattack on Quest Group in a post first observed in September 2026, alleging it had gained access to internal company systems. As of this writing, Quest Group has not issued a public confirmation of the incident, and the exact scope of any exposed data remains unknown. If you believe you were affected, contact Almeida Law Group.
About Quest Group
Quest Group (questgroupsearch.com) is a global executive search, staffing solutions, and consulting firm founded in 2009 and headquartered in Atlanta, Georgia, with offices in New York and relationships across the Americas, Europe, and Asia. The company specializes in talent acquisition across sectors including accounting and finance, financial services, healthcare, human resources, information technology, and real estate. It is a private firm with approximately 51–200 employees and estimated annual revenue of approximately $30–35 million.
What Happened?
On September 18th, 2026, the Anubis ransomware group posted a dark web claim alleging it had compromised Quest Group. The claim was tracked by Ransomware.live and describes the purportedly obtained data as “employee data, internal files, and a few unexpected discoveries.” This remains an unverified attacker-side allegation. No confirmation from Quest Group, any regulatory body, or independent journalism has been found. The specific types of data that may have been affected were not identified in any confirmed source, and the claim description used by Anubis appears to be templated language also used in other group postings.
Anubis is a ransomware-as-a-service (RaaS) operation first observed in late 2024, originally operating under the name Sphinx. As of mid-September 2026, the group had publicly claimed approximately 108 victims. Anubis is known to target organizations in healthcare, manufacturing, and professional services, and employs a double-extortion model. Researchers at Arctic Wolf have documented Anubis initial access techniques including exploitation of CitrixBleed 2 (CVE-2025-5777) and abuse of VPN infrastructure. The group also features an optional “wipe mode” that permanently destroys data rather than encrypting it. No prior cybersecurity incidents or litigation specific to Quest Group were identified in supplemental research.
Key Facts at a Glance
- Company or Organization: Quest Group
- Industry: Staffing and Recruiting / Employment Services
- Location: Atlanta, Georgia (headquarters); New York
- Incident type: Ransomware leak-site allegation (dark web claim; unconfirmed)
- Source: Ransomware.live — Victim: Quest Group, Crunchbase — Quest Group, Arctic Wolf — Anubis Ransomware Techniques, Proven Data — Anubis Ransomware Profile
What Should You Do?
If you believe your information may have been involved, consider placing a fraud alert or credit freeze with the three major credit bureaus—Equifax, Experian, and TransUnion—to help prevent unauthorized accounts from being opened in your name. You can request a free copy of your credit report at AnnualCreditReport.com and review it carefully for unfamiliar activity. Monitor your financial accounts regularly for any suspicious transactions. If you become a victim of identity theft or need help reporting fraud, visit IdentityTheft.gov for step-by-step guidance.
Your Legal Rights
If your personal information was involved in this breach, you may have legal rights depending on the facts of the incident and the law in your state. Almeida Law Group represents consumers in data breach and privacy litigation and can help you evaluate whether you may have a claim. Contact us at (708) 529-5418 or through our contact page for a free case evaluation.
