worldleaks
ransomware group · aka WorldLeaks, WorldLeaks extortion group (widely reported as the successor to Hunters International) · unknown; vendor reporting in 2025 described WorldLeaks as the rebrand/successor of Hunters International, the operation that itself inherited the affiliate ecosystem of the Hive ransomware group · active since 2025 - Hunters International's pivot to the WorldLeaks brand was reported by security media in mid-2025; this dashboard's tracking of the group begins 2026-06-20
WorldLeaks is a data-extortion group that emerged in 2025 as the successor to Hunters International, the operation widely described as inheriting the Hive ransomware group's affiliate network. Vendor reporting in 2025 characterized the rebrand as a shift away from encrypting systems toward exfiltration-only extortion, pressuring victims by threatening to publish stolen data. The group maintains a public leak site listing victims; dashboard tracking shows a low posting cadence, with 8 victims since 2026-06-20 and the most recent post on 2026-07-22. Listed victims span manufacturing, education, financial services, IT services, and professional services, with no confirmed concentration in a single region. No specific initial-access techniques, exploited vulnerabilities, or revenue figures have been widely reported for this group.
- Exfiltration-only extortion: steals victim data and publishes it on a leak site; encryption reportedly abandoned after the Hunters International rebrand (vendor reporting, 2025)
- Inherits Hunters International lineage: reportedly reuses the affiliate network and infrastructure tied to the former Hive/Hunters International ecosystem (vendor reporting, 2025)
- Leak-site publication of victim data used as negotiation leverage (observed site behavior)
- Direct extortion negotiations with victim organizations (specific methods unknown)
- Initial access techniques: unknown - no widely documented access method or exploited CVE for this group
- Targets a mix of small, mid-sized, and larger organizations across multiple sectors, based on listed victims
Tata Electronics, PinnPACK, First Federal Savings & Loan, Reliance Group, Treet Group of Companies, Starpool, COMHAR, Centra Sota Cooperative, St. Francis Xavier Catholic School System, Service IT
No public figure.
Leak-site victims178 posts · newest first
| Victim | Discovered | Details |
|---|---|---|
| PinnPACK | · Jul 22, 2026 | — |
| St. Francis Xavier Catholic School System | · Jul 22, 2026 | — |
| Service IT | · Jul 2, 2026 | — |
| Treet Group of Companies | · Jul 2, 2026 | — |
| Starpool | · Jul 1, 2026 | — |
| COMHAR | · Jul 1, 2026 | — |
| Super Finishing | · Jun 20, 2026 | — |
| L'Archevque & Rivest Ltée | · Jun 20, 2026 | — |
| Reliance Group | · Jun 11, 2026 | — |
| First Federal Savings & Loan | · Jun 10, 2026 | — |
| Tata Electronics | · Jun 10, 2026 | — |
| Centra Sota Cooperative | · Jun 10, 2026 | — |
| GDL Transport | · Jun 9, 2026 | — |
| Apollo Pipes | · Jun 9, 2026 | — |
| M1xchange | · Jun 9, 2026 | — |
| Access Dental | · Jun 5, 2026 | — |
| CH Karnchang Public | · Jun 5, 2026 | — |
| United Auto Supply | · Jun 5, 2026 | — |
| American Battery Factory | · May 28, 2026 | — |
| BMJ Paperpack | · May 22, 2026 | — |
| Bestat Pharmaservices Corp. | · May 12, 2026 | — |
| SMTA Sherwood Mutual Telephone Association | · May 1, 2026 | — |
| Ceywater Consultants | · May 1, 2026 | — |
| Peyton Law Firm | · May 1, 2026 | — |
| Mediaworks Kft | · Apr 29, 2026 | — |
| DIME Distribuidora | · Apr 28, 2026 | — |
| Carma Packaging | · Apr 28, 2026 | — |
| Intikom | · Apr 28, 2026 | — |
| Birtcher Anderson & Davis | · Apr 27, 2026 | — |
| Virginia Health Services | · Apr 23, 2026 | — |
| Equatorial Coca-Cola Bottling | · Apr 22, 2026 | — |
| Jersey Fabrication Group LLC | · Apr 14, 2026 | — |
| Deaconess Health System | · Apr 8, 2026 | — |
| National Aerospace Fasteners | · Apr 2, 2026 | — |
| AMBAU Personalservice | · Apr 1, 2026 | — |
| Alamo Heights School District | · Apr 1, 2026 | — |
| San Felipe Del Rio CISD School | · Mar 31, 2026 | — |
| Sheraton Hotel | · Mar 27, 2026 | — |
| CIM | · Mar 27, 2026 | — |
| Orient Petroleum | · Mar 27, 2026 | — |
| Leighton | · Mar 27, 2026 | — |
| Marion Military Institute | · Mar 23, 2026 | — |
| Matthews Real Estate Investment Services | · Mar 20, 2026 | — |
| Winmate Inc. | · Mar 20, 2026 | — |
| Legacy Health LLC | · Mar 20, 2026 | — |
| Finance of America Companies Inc. | · Mar 20, 2026 | — |
| City of Los Angeles (LA) | · Mar 20, 2026 | — |
| Town of Blacksburg | · Mar 20, 2026 | — |
| Pearce Services | · Mar 20, 2026 | — |
| TSN Co., Ltd. | · Mar 20, 2026 | — |
In the newsAll →
No articles mention this group yet.