worldleaks
ransomware group · aka WorldLeaks, WorldLeaks extortion group (widely reported as the successor to Hunters International) · unknown; vendor reporting in 2025 described WorldLeaks as the rebrand/successor of Hunters International, the operation that itself inherited the affiliate ecosystem of the Hive ransomware group · active since 2025 - Hunters International's pivot to the WorldLeaks brand was reported by security media in mid-2025; this dashboard's tracking of the group begins 2026-06-20
WorldLeaks is a data-extortion group that emerged in 2025 as the successor to Hunters International, the operation widely described as inheriting the Hive ransomware group's affiliate network. Vendor reporting in 2025 characterized the rebrand as a shift away from encrypting systems toward exfiltration-only extortion, pressuring victims by threatening to publish stolen data. The group maintains a public leak site listing victims; dashboard tracking shows a low posting cadence, with 8 victims since 2026-06-20 and the most recent post on 2026-07-22. Listed victims span manufacturing, education, financial services, IT services, and professional services, with no confirmed concentration in a single region. No specific initial-access techniques, exploited vulnerabilities, or revenue figures have been widely reported for this group.
- Exfiltration-only extortion: steals victim data and publishes it on a leak site; encryption reportedly abandoned after the Hunters International rebrand (vendor reporting, 2025)
- Inherits Hunters International lineage: reportedly reuses the affiliate network and infrastructure tied to the former Hive/Hunters International ecosystem (vendor reporting, 2025)
- Leak-site publication of victim data used as negotiation leverage (observed site behavior)
- Direct extortion negotiations with victim organizations (specific methods unknown)
- Initial access techniques: unknown - no widely documented access method or exploited CVE for this group
- Targets a mix of small, mid-sized, and larger organizations across multiple sectors, based on listed victims
Tata Electronics, PinnPACK, First Federal Savings & Loan, Reliance Group, Treet Group of Companies, Starpool, COMHAR, Centra Sota Cooperative, St. Francis Xavier Catholic School System, Service IT
No public figure.
Leak-site victims178 posts · newest first
| Victim | Discovered | Details |
|---|---|---|
| Peak Toolworks | · Mar 11, 2026 | — |
| Sagent Pharmaceuticals | · Mar 8, 2026 | — |
| Adelphi | · Feb 17, 2026 | — |
| Modoc Medical Center | · Feb 16, 2026 | — |
| Thames Valley Chamber of Commerce | · Feb 16, 2026 | — |
| Stanley Autenrieth Auction Group | · Feb 12, 2026 | — |
| Sanoviv Medical Institute | · Feb 10, 2026 | — |
| Interplan | · Feb 3, 2026 | — |
| FluidOne | · Jan 30, 2026 | — |
| LTS Group | · Jan 24, 2026 | — |
| Nike, Inc. | · Jan 22, 2026 | — |
| Might Electronic Co. LTD | · Jan 20, 2026 | — |
| Meissner Bolte | · Jan 19, 2026 | — |
| Ellison Educational Equipment, Inc | · Dec 24, 2025 | — |
| Chatham Asset Management | · Dec 23, 2025 | — |
| Roose Ressler & Green Co | · Dec 17, 2025 | — |
| Smith Hawks | · Dec 17, 2025 | — |
| OGI Groupe | · Dec 16, 2025 | — |
| Thrings Solicitors and Lawyers | · Dec 15, 2025 | — |
| Wavenet | · Dec 14, 2025 | — |
| Municipality of North Perth (Canada) | · Dec 9, 2025 | — |
| The Wardlaw-Hartridge School | · Dec 9, 2025 | — |
| Empresas Maggi | · Dec 9, 2025 | — |
| Granjas 4 Irmãos SA - Agropecuária, Indústria e Comércio | · Dec 8, 2025 | — |
| Ernest Käslin | · Dec 8, 2025 | — |
| Big Lar | · Dec 8, 2025 | — |
| Family Farm and Home | · Nov 28, 2025 | — |
| Nuclebrás Equipamentos Pesados | · Nov 22, 2025 | — |
| Jefferson Enterprises, LLC | · Nov 14, 2025 | — |
| Platinum Healthcare Staffing | · Nov 14, 2025 | — |
| UNOde50 | · Nov 14, 2025 | — |
| Herman & Chamow | · Nov 14, 2025 | — |
| Health Dimensions Group | · Nov 6, 2025 | — |
| Lidera Network | · Nov 1, 2025 | — |
| Central Plate Services Limitited | · Nov 1, 2025 | — |
| Kobayashi | · Nov 1, 2025 | — |
| Summit Hotel Properties | · Oct 24, 2025 | — |
| Essilor of America | · Oct 24, 2025 | — |
| Peruvian Connection | · Oct 24, 2025 | — |
| Coilplus | · Oct 16, 2025 | — |
| Mandom Corporation | · Oct 11, 2025 | — |
| Heritage Communities | · Oct 9, 2025 | — |
| CHRIST Juweliere | · Oct 6, 2025 | — |
| Centers Laboratory | · Oct 6, 2025 | — |
| Saint Mary's Home | · Oct 3, 2025 | — |
| Madison Healthcare Services | · Sep 23, 2025 | — |
| Pyramid Global Hospitality | · Sep 23, 2025 | — |
| Mavis Tire Supply | · Sep 23, 2025 | — |
| KIPP DC | · Sep 23, 2025 | — |
| Sapp Bros | · Sep 23, 2025 | — |
In the newsAll →
No articles mention this group yet.