worldleaks
First seen May 16, 2025Active175 claimed victims
The claims below are reproduced as posted by worldleaks on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
World Leaks emerged in January 2025 as a rebrand of the Hunters International ransomware operation, shifting its focus from file encryption to solely stealing sensitive data and threatening to leak it unless a ransom is paid
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| Washington Prime Group Inc | August 8, 2025 | ransomware_live | — |
| Madison Healthcare Services | August 6, 2025 | ransomware_live | — |
| Nicke | August 2, 2025 | ransomware_live | — |
| ACEA SpA | July 30, 2025 | ransomware_live | — |
| Legend Senior Living | July 29, 2025 | ransomware_live | — |
| Able Home Care | July 24, 2025 | ransomware_live | — |
| DP Systems | July 20, 2025 | ransomware_live | — |
| Prosegur | July 18, 2025 | ransomware_live | — |
| Sika Footwear | July 18, 2025 | ransomware_live | — |
| Sneg Proprete | July 18, 2025 | ransomware_live | — |
| ACRO Automation Systems | July 15, 2025 | ransomware_live | — |
| Motor Controls Inc. | July 11, 2025 | ransomware_live | — |
| Survival Flight Inc | July 11, 2025 | ransomware_live | — |
| Neway Valve | July 10, 2025 | ransomware_live | — |
| Primoris | July 8, 2025 | ransomware_live | — |
| Racine Olson | July 5, 2025 | ransomware_live | — |
| TCI Doors | July 4, 2025 | ransomware_live | — |
| Integrated Silicon Solution Inc. | July 4, 2025 | ransomware_live | — |
| Dr. Falk Pharma | July 3, 2025 | ransomware_live | — |
| Somotsoft | July 2, 2025 | ransomware_live | — |
| The Gisborne Group | June 29, 2025 | ransomware_live | — |
| Springs Christian Academy | June 29, 2025 | ransomware_live | — |
| Tiscali SPA | June 28, 2025 | ransomware_live | — |
| DARA Pharma | June 28, 2025 | ransomware_live | — |
| Tech Mahindra | June 27, 2025 | ransomware_live | — |
| Dell Technologies | June 27, 2025 | ransomware_live | — |
| Exel Composites | June 27, 2025 | ransomware_live | — |
| Scherer Sanitätshaus Gruppe | June 24, 2025 | ransomware_live | — |
| Becker Robotic | June 20, 2025 | ransomware_live | — |
| Coalinga Regional Medical Center | June 16, 2025 | ransomware_live | — |
| Act Legal | June 15, 2025 | ransomware_live | — |
| Prime Beverage Group | June 15, 2025 | ransomware_live | — |
| Kentfield Hospital | June 13, 2025 | ransomware_live | — |
| NPK | June 13, 2025 | ransomware_live | — |
| Thomas Bennett & Hunter | June 12, 2025 | ransomware_live | — |
| McNealy Brown | June 11, 2025 | ransomware_live | — |
| RattanIndia Power | June 9, 2025 | ransomware_live | — |
| Operation PAR, Inc. | June 8, 2025 | ransomware_live | — |
| Four Quarters | June 6, 2025 | ransomware_live | — |
| Plane Business Kayan Aero | May 30, 2025 | ransomware_live | — |
| Eastern Platinum Limited | May 27, 2025 | ransomware_live | — |
| Mavis Tire Supply | May 27, 2025 | ransomware_live | — |
| InnoMedica | May 26, 2025 | ransomware_live | — |
| Chain IQ | May 24, 2025 | ransomware_live | — |
| Center for Clinical Research | May 23, 2025 | ransomware_live | — |
| Informatika A.D. | May 23, 2025 | ransomware_live | — |
| ONGC Petro Additions Limited | May 19, 2025 | ransomware_live | — |
| Dynamic Netsoft | May 17, 2025 | ransomware_live | — |
| Lake Region Healthcare | May 16, 2025 | ransomware_live | — |
| T.O. Brasil | May 15, 2025 | ransomware_live | — |
| Zeus Tecnología | May 14, 2025 | ransomware_live | — |
| Proactive Engineering Consultants | May 14, 2025 | ransomware_live | — |
| A&R Engineering | May 13, 2025 | ransomware_live | — |
| J-Kraft | May 12, 2025 | ransomware_live | — |
| Valiant Energy Solutions | May 6, 2025 | ransomware_live | — |
| ASC Machine Tools | May 4, 2025 | ransomware_live | — |
| Kel Campbell | May 4, 2025 | ransomware_live | — |
| AntFarm | May 4, 2025 | ransomware_live | — |
| Landscape Hawaii | May 4, 2025 | ransomware_live | — |
| Agaris | May 3, 2025 | ransomware_live | — |
| L3Harris Technologies | April 28, 2025 | ransomware_live | — |
| Indigo Group S.A. | April 21, 2025 | ransomware_live | — |
| Jardin De Ville | April 21, 2025 | ransomware_live | — |
| Sylvania | April 16, 2025 | ransomware_live | — |
| Horecamaterialen De Meester NV | April 14, 2025 | ransomware_live | — |
| Freedman HealthCare | April 14, 2025 | ransomware_live | — |
| Canadian Rocky Mountain Resorts | April 9, 2025 | ransomware_live | — |
| Asco Tools | March 29, 2025 | ransomware_live | — |
| A M King | March 28, 2025 | ransomware_live | — |
| Myrtue Medical Center Hospital | March 15, 2025 | ransomware_live | — |
| Nuclebrás Equipamentos Pesados | March 13, 2025 | ransomware_live | — |
| ASCOMA Cameroon | February 26, 2025 | ransomware_live | — |
| Origene | February 3, 2025 | ransomware_live | — |
| Brett-Robinson | May 8, 2023 | ransomware_live | — |
| Nutis Press | June 23, 2022 | ransomware_live | — |
← NewerPage 2 of 2
Claim data from ransomware.live and RansomLook (CC BY 4.0).