Penfold
StormThis record tracks a ransomware attack claimed by the Storm group against Penfold. It collects the publicly disclosed attack details — sector, location and timeline — as published on the operator's leak site and indexed by Breach House.
Window Zero
EXPOSURE GAPWindow Zero is the time the breach stayed in the open before anyone said so — the gap between when the attack was first discovered on the operator's leak site (t1) and when it was publicly disclosed (t2). The wider this window, the longer victims, staff and customers were exposed with no warning.
Attack Summary
Penfold is a London-based financial technology company founded in 2018 that provides digital workplace and personal pension solutions for businesses, employees, self-employed professionals, freelancers, and limited company directors. The platform simplifies auto-enrolment compliance for employers while offering individuals real-time pension tracking, transparent investment breakdowns, and flexible contribution management via a mobile app and website. Penfold supports pension consolidation, automatic tax relief, and multiple investment plans including a Sharia-compliant option. Investments are managed by BlackRock and HSBC, and the company is authorised and regulated by the Financial Conduct Authority. Over 100,000 people and thousands of businesses across the United Kingdom trust Penfold with their pension savings. The company headquarters is located in The Ministry, 79–81 Borough Road, London, SE1 1DN, United Kingdom. 51-200 Employees
Leak Screenshots
16 CAPTUREDCaptured directly from the operator's leak site by our collector, last checked 2026-10-10. Verdict evidence: [M1] STATUS Published published, VIEWS 5,767 Across detail + file-list, LIMIT DAY Sep 11, 2026 Already passed, POSTED Aug 17, 2026 2 months ago
Proof files published by the operator — 15 image(s) harvested from this entry. Content is locked; type and dimensions shown.
Capture history — 3 day(s) tracked. Content is locked.