triple x
ransomware group · aka TripleXX, Triple X · unknown · active since 2026-06-13 (earliest victim post tracked on this dashboard; any earlier activity unknown)
Triple X is a small, recently surfaced ransomware/data-extortion group tracked primarily through its leak site, which posted its first recorded victim on 2026-06-13. Posting volume has been low, with only three victims published in roughly the first two months of tracking. The group's model appears centered on data-theft extortion and victim shaming, and at least one victim's data was published for free; whether the group also deploys encryption is unknown. Its claimed victims are international, including two large state-linked banks in India and Indonesia, plus legal-sector targets. No public vendor, law-enforcement, or blockchain-analytics reporting on the group's tradecraft or finances has been identified, so claims should be treated as unverified.
- Operates a leak site used to name and shame victims for extortion
- Low posting cadence: 3 victims across first ~8 weeks of tracked activity
- Claims high-profile financial-sector victims to increase negotiation pressure
- Has published at least one victim's data for free rather than withholding it
- Use of encryption in addition to data theft: unknown
- Initial access vectors, tooling, and affiliate structure: unknown
Bank of Baroda (bankofbaroda.bank.in) - major Indian bank (claim via leak site; unverified), Bank Negara Indonesia / BNI (bni.co.id) - Indonesian bank (claim via leak site; unverified), Henshaw Law - law firm (claim via leak site; unverified), Law Offices US (immigrationonline.com) - US immigration law practice (claim via leak site; unverified)
No public figure.
Leak-site victims4 posts · newest first
| Victim | Discovered | Details |
|---|---|---|
| Henshaw Law | · Aug 5, 2026 | 1 terabytes of people's data https://henshawlawak.com/ Henshaw Law, Despite repeated recommendations, no action was taken. The problem remains unresolved, the system is full of bugs, people's documents are at risk, and they won't take any responsibility. Multiple people could commit suicide, what important information has been leaked about them, and who is responsible for why the recommendations weren't taken seriously. what data will leak ? -Personal family files -Passports and licenses -Court ruling and public complaint forms -Documents scans -Forms and emails scans sample : Full download data link : Download |
| Bank of Baroda bigest indian bank bankofbaroda.bank.in | · Jul 24, 2026 | 1 terabytes of people's data https://bankofbaroda.bank.in/ Imagine I'm going to the bank to open an account. and due to the bank's weak password and mistake, my personal data should be leaked, and fraudsters should use my resources in scam people and verify exchangers shops and fraudulent schemes. How many years should I be held responsible to the police and for complaints? its fair ? Yes, approximately 100 to 300 thousand forms from people who had given their personal information/documents to the bank for opening accounts filled out forms and even photographs with their national ID cards all of it is downloadable for free. what data will leak ? -Personal Banking (Savings accounts, current accounts, etc.) -NetBanking (bob World Internet for corporate and retail users) -Loans (Personal, Home, Car, and Education loans) -NRI & Corporate Banking Services -Customer support and branch/ATM locator services. Sapmle data (check what you will download) : Download few sample pics: pic 1 pic 2 pic 3 pic 4 pic 5 pic 6 pic 7 ) Full download data link : Download |
| Law Offices US immigrationonline.com | · Jun 13, 2026 | https://immigrationonline.com/ 1.5 terabytes of people's data in a immigrationonline law firm. Server overload and lack of updates have caused important data to be exposed to potential leaks. At the same time, many of these financial and tax documents also contain sensitive personal information, including full names, home addresses, Social Security numbers, banking details, and contact information. what will leak ? Confidential court cases : Details of lawsuits, complaints, or defenses that have not yet been filed in court. Financial and banking information : Sensitive client accounts, contracts, or transactions. Intellectual property documents : Such as patents, designs, or business contracts that have not yet been made public. Private correspondence and emails : Communications between the attorney and the client that should remain strictly confidential. what data will leak ? 24,900 passport files sample Tax forms of employees and colleagues sample ID cards and driver’s licenses sample few sample pics: pic 1 pic 2 pic 3 pic 4 pic 5 This is probably the right moment to point out that, at a certain stage, virtually any data breach is still a reversible situation. Companies are usually given an opportunity to contain the damage and resolve the issue albeit at a price. But despite knowing exactly what was happening, and fully understanding that it was putting the security and privacy of its own employees at risk, the company made a calculated decision to let it happen. And now the company will tell its employees: “Sorry, we’ve experienced a data breach, and your passports are now publicly available online.” But they will never say: “We were offered a chance to pay to prevent your passports from being published, but we decided it wasn’t worth it so now they’re on the internet. Sorry.” download data link : http://6qqz6m3b6htudohg2mlf5gdcalonxy3sh5g4dix4mpyirjcgelqqufad.onion/immigrationonline.com/ |
| Bni.co.id bank of indonesia free data. | · May 21, 2026 | — |
In the newsAll →
No articles mention this group yet.