GSCCCA Data Breach Claimed by DEVMAN 2.0 Ransomware Group

The GSCCCA (Georgia Superior Court Clerks’ Cooperative Authority) has reportedly been listed as a victim on the dark web portal of the ransomware group DEVMAN 2.0. The attackers claim to have stolen 500GB of confidential data, including property records, legal filings, and administrative documents, and are threatening to publish the information if their demands are not met.

The alleged GSCCCA data breach surfaced on November 22, 2025, and quickly drew attention from cybersecurity analysts who monitor ransomware leak sites. While the group has not yet released proof-of-leak samples, its past behavior suggests the claim may be credible. DEVMAN 2.0 has previously targeted government institutions and data management systems, often following through on its threats to leak sensitive files.

The GSCCCA serves as Georgia’s primary recordkeeping authority for court filings, property transactions, liens, and notary registrations. A breach of its systems could have serious implications for the authenticity of legal documents and property ownership verification across the state. Officials have not yet issued a public statement confirming or denying the incident.

Security experts say this appears to be part of a broader rise in extortionware, a variant of ransomware that focuses on data theft and public exposure rather than system encryption. Even if backups exist, the public release of court and property records could damage trust in Georgia’s legal and real estate infrastructure for years to come.

Authorities are expected to investigate whether any confidential records were accessed or exfiltrated. Legal professionals and title companies are being urged to verify filings directly with county offices and to monitor for fraudulent or altered documents.

The alleged GSCCCA data breach underscores how cybercriminals are increasingly targeting institutions that manage irreplaceable public records. If confirmed, the attack would mark one of the most serious extortionware incidents to affect a state recordkeeping authority in recent history.