ExfilSquad is a threat actor group that claims responsibility for data breaches and publishes stolen data on leak sites. In the PNLD breach, ExfilSquad listed the organization on its leak site, though PNLD has not officially attributed the incident to the group. VenariX found no evidence of ransomware or malware in the campaign, suggesting a focus on data exfiltration.