worldleaks
First seen May 16, 2025Active175 claimed victims
The claims below are reproduced as posted by worldleaks on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
World Leaks emerged in January 2025 as a rebrand of the Hunters International ransomware operation, shifting its focus from file encryption to solely stealing sensitive data and threatening to leak it unless a ransom is paid
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| PinnPACK | July 21, 2026 | ransomware_live | — |
| St. Francis Xavier Catholic School System | July 21, 2026 | ransomware_live | — |
| Treet Group of Companies | July 2, 2026 | ransomware_live | — |
| Service IT | July 2, 2026 | ransomware_live | — |
| COMHAR | July 1, 2026 | ransomware_live | — |
| Starpool | July 1, 2026 | ransomware_live | — |
| Super Finishing | June 20, 2026 | ransomware_live | — |
| L'Archevque & Rivest Ltée | June 20, 2026 | ransomware_live | — |
| Centra Sota Cooperative | June 10, 2026 | ransomware_live | — |
| M1xchange | June 9, 2026 | ransomware_live | — |
| GDL Transport | June 9, 2026 | ransomware_live | — |
| Apollo Pipes | June 9, 2026 | ransomware_live | — |
| CH Karnchang Public | June 5, 2026 | ransomware_live | — |
| United Auto Supply | June 5, 2026 | ransomware_live | — |
| Access Dental | June 5, 2026 | ransomware_live | — |
| American Battery Factory | May 28, 2026 | ransomware_live | — |
| Reliance Group | May 25, 2026 | ransomware_live | — |
| Tata Electronics | May 24, 2026 | ransomware_live | — |
| Bestat Pharmaservices Corp. | May 12, 2026 | ransomware_live | — |
| Ceywater Consultants | May 1, 2026 | ransomware_live | — |
| First Federal Savings & Loan | April 29, 2026 | ransomware_live | — |
| Carma Packaging | April 28, 2026 | ransomware_live | — |
| Intikom | April 28, 2026 | ransomware_live | — |
| Mediaworks Kft | April 28, 2026 | ransomware_live | — |
| Birtcher Anderson & Davis | April 27, 2026 | ransomware_live | — |
| Virginia Health Services | April 23, 2026 | ransomware_live | — |
| Equatorial Coca-Cola Bottling | April 22, 2026 | ransomware_live | — |
| SMTA Sherwood Mutual Telephone Association | April 16, 2026 | ransomware_live | — |
| BMJ Paperpack | April 16, 2026 | ransomware_live | — |
| DIME Distribuidora | April 10, 2026 | ransomware_live | — |
| National Aerospace Fasteners | April 2, 2026 | ransomware_live | — |
| Alamo Heights School District | April 1, 2026 | ransomware_live | — |
| AMBAU Personalservice | April 1, 2026 | ransomware_live | — |
| San Felipe Del Rio CISD School | March 31, 2026 | ransomware_live | — |
| CIM | March 27, 2026 | ransomware_live | — |
| Sheraton Hotel | March 27, 2026 | ransomware_live | — |
| Marion Military Institute | March 23, 2026 | ransomware_live | — |
| Legacy Health LLC | March 20, 2026 | ransomware_live | — |
| TSN Co., Ltd. | March 20, 2026 | ransomware_live | — |
| Finance of America Companies Inc. | March 20, 2026 | ransomware_live | — |
| City of Los Angeles (LA) | March 20, 2026 | ransomware_live | — |
| Matthews Real Estate Investment Services | March 20, 2026 | ransomware_live | — |
| Peak Toolworks | March 11, 2026 | ransomware_live | — |
| Leighton | March 11, 2026 | ransomware_live | — |
| Peyton Law Firm | March 11, 2026 | ransomware_live | — |
| Sagent Pharmaceuticals | March 8, 2026 | ransomware_live | — |
| Modoc Medical Center | February 16, 2026 | ransomware_live | reported in press coverage |
| Thames Valley Chamber of Commerce | February 16, 2026 | ransomware_live | — |
| Stanley Autenrieth Auction Group | February 12, 2026 | ransomware_live | — |
| Adelphi | February 11, 2026 | ransomware_live | — |
| Sanoviv Medical Institute | February 10, 2026 | ransomware_live | — |
| Orient Petroleum | February 2, 2026 | ransomware_live | — |
| Winmate Inc. | January 29, 2026 | ransomware_live | — |
| Interplan | January 21, 2026 | ransomware_live | — |
| Might Electronic Co. LTD | January 20, 2026 | ransomware_live | — |
| Deaconess Health System | January 7, 2026 | ransomware_live | — |
| Jersey Fabrication Group LLC | January 6, 2026 | ransomware_live | — |
| Chatham Asset Management | December 23, 2025 | ransomware_live | — |
| Smith Hawks | December 16, 2025 | ransomware_live | — |
| Nike, Inc. | December 16, 2025 | ransomware_live | — |
| Thrings Solicitors and Lawyers | December 15, 2025 | ransomware_live | — |
| Wavenet | December 14, 2025 | ransomware_live | — |
| Municipality of North Perth (Canada) | December 9, 2025 | ransomware_live | — |
| Empresas Maggi | December 9, 2025 | ransomware_live | — |
| The Wardlaw-Hartridge School | December 9, 2025 | ransomware_live | — |
| Granjas 4 Irmãos SA - Agropecuária, Indústria e Comércio | December 8, 2025 | ransomware_live | — |
| Big Lar | December 8, 2025 | ransomware_live | — |
| Pearce Services | December 4, 2025 | ransomware_live | — |
| Family Farm and Home | November 28, 2025 | ransomware_live | — |
| Town of Blacksburg | November 25, 2025 | ransomware_live | — |
| Herman & Chamow | November 14, 2025 | ransomware_live | — |
| UNOde50 | November 14, 2025 | ransomware_live | — |
| OGI Groupe | November 9, 2025 | ransomware_live | — |
| Health Dimensions Group | November 6, 2025 | ransomware_live | — |
| Ernest Käslin | October 31, 2025 | ransomware_live | — |
| LTS Group | October 27, 2025 | ransomware_live | — |
| Kobayashi | October 24, 2025 | ransomware_live | — |
| Central Plate Services Limitited | October 17, 2025 | ransomware_live | — |
| Roose Ressler & Green Co | October 17, 2025 | ransomware_live | — |
| Lidera Network | October 15, 2025 | ransomware_live | — |
| CHRIST Juweliere | October 6, 2025 | ransomware_live | — |
| Summit Hotel Properties | October 1, 2025 | ransomware_live | — |
| Ellison Educational Equipment, Inc | October 1, 2025 | ransomware_live | — |
| Peruvian Connection | September 23, 2025 | ransomware_live | — |
| City Wide | September 4, 2025 | ransomware_live | — |
| Heritage Communities | September 4, 2025 | ransomware_live | — |
| Jefferson Enterprises, LLC | September 3, 2025 | ransomware_live | — |
| Platinum Healthcare Staffing | August 30, 2025 | ransomware_live | — |
| Sapp Bros | August 29, 2025 | ransomware_live | — |
| Saint Mary's Home | August 28, 2025 | ransomware_live | — |
| Essilor of America | August 28, 2025 | ransomware_live | — |
| Paul Rossi Law Offices | August 22, 2025 | ransomware_live | — |
| Mandom Corporation | August 21, 2025 | ransomware_live | — |
| MPOWERHealth | August 19, 2025 | ransomware_live | — |
| Centers Laboratory | August 14, 2025 | ransomware_live | — |
| Pyramid Global Hospitality | August 13, 2025 | ransomware_live | — |
| KIPP DC | August 12, 2025 | ransomware_live | — |
| Northwest Medical Specialties | August 11, 2025 | ransomware_live | — |
| Coilplus | August 11, 2025 | ransomware_live | — |
| Risen Energy Co. | August 9, 2025 | ransomware_live | — |
Page 1 of 2Older →
Claim data from ransomware.live and RansomLook (CC BY 4.0).