Vantage Finance, a provider of turnkey finance and insurance services for independent auto dealerships, fell victim to a ransomware attack by the Everest ransomware group on July 23, 2025. The attackers claimed to have exfiltrated 95,430 lines of organizational data, including personally identifiable information (PII) such as names, addresses, dates of birth, Social Security numbers, driver’s license numbers, and financial account details. The breach was publicly disclosed on the dark web via the Tor network, a common platform for ransomware groups to leak or sell stolen data.The attack targeted a financial services company, a high-value sector frequently exploited for sensitive customer data. While the exact number of affected individuals remains undisclosed, it is estimated to impact thousands of applicants, exposing them to risks like identity theft, financial fraud, and unauthorized account access. Vantage Finance has not yet issued an official response or mitigation steps, leaving affected parties to independently monitor their accounts and credit reports for suspicious activity.The incident underscores the severe consequences of ransomware attacks on financial institutions, where data theft and operational disruption can have long-term reputational and financial repercussions for both the company and its customers.