Close Menu
  • Home
  • News
  • Security
  • Privacy
  • Cybercrime
    • Threat Groups
    • Ransomware
    • Explainers
    • Stealer Logs
  • AI
  • OSINT
  • Tools
    • Ransomtracker
    • Stealercheck
    • FortiBleed Checker
  • About Us
Facebook X (Twitter) Instagram Threads
Ransomnews
  • Home
  • News
  • Security
  • Privacy
  • Cybercrime
    • Threat Groups
    • Ransomware
    • Explainers
    • Stealer Logs
  • AI
  • OSINT
  • Tools
    • Ransomtracker
    • Stealercheck
    • FortiBleed Checker
  • About Us
Facebook X (Twitter) LinkedIn
Ransomnews

BJORKA · Threat actor profile

// THREAT ACTOR

BJORKA_

Active

BJORKA is a ransomware operator tracked through its public data-leak infrastructure. The group operates under the double-extortion model that defines the modern ransomware ecosystem — file encryption combined with the threat of stolen-data publication on a public leak site — and continues to post fresh victim claims as part of an ongoing extortion campaign.

For Ransomnews editorial coverage of BJORKA — incident write-ups, attribution notes, and additional context — see the Threat Groups archive or run a site search.

11 Victims tracked
4 / 6 Active mirrors
2022-08-20 First listing
2024-09-13 Most recent

Victims by year

  • 2024 1
  • 2023 4
  • 2022 6

Leak site mirrors

6 mirrors tracked, 4 currently reachable. These are criminal-infrastructure URLs — links are deliberately not provided.

  • netleaks.net Databases | Bjorka snapshot · 2026-08-06 21:36
  • wki2kiikvycnowcygyz7p4svefhgwcu57ae7brd5waitbsgoi6yrfvid.onion snapshot · 2025-02-01 02:31
  • 3lce6cov7sj7vovrr3cbanqoolhgfgqqcvjrtlzlqnex7esdz33mdoqd.onion snapshot · 2025-02-01 02:31
  • bjork.ai Bjork.ai for sale | Spaceship.com snapshot · 2026-08-06 21:21
  • netleaks.net Contact | Bjorka snapshot · 2026-08-06 21:11
  • netleaks.net Bjorka snapshot · 2026-08-06 21:33

Recent victims

The 50 most recent victims claimed by BJORKA. Total in the index: 11.

Date listed Victim Description
2024-09-13 6 MILION INDONESIA TAXPAYER IDENTIFICATION NUMBER (NPWP) In the sample you will find personal information about the president o…
2023-12-28 217 MILLION SIAK DUKCAPIL MINISTRY OF HOME AFFAIRS OF INDONESIA The SIAK database owned by Dukcapil Ministry of Home Affairs of Indone…
2023-07-05 34 MILLION INDONESIAN PASSPORTS All Indonesian passports issued by Directorate General of Immigration …
2023-06-27 35 MILLION MYINDIHOME TELKOM INDONESIA Previously I have shared the browsing history of Indihome users. Now I…
2023-03-12 19 MILLION BPJS KETENAGAKERJAAN INDONESIA BPJS Ketenagakerjaan is a government organization that provide worker …
2022-11-15 3,2 BILLION INDONESIAN COVID-19 APP PEDULI LINDUNGI PeduliLindungi (roughly translated from Indonesian as “care to protect…
2022-11-10 45 MILLION MYPERTAMINA INDONESIA MyPertamina is a digital financial service platform from Pertamina tha…
2022-10-06 105 MILLION KOMISI PEMILIHAN UMUM INDONESIA General Elections Commission of Indonesia FILE INFORMATION Compres…
2022-10-01 679K LETTERS TO THE PRESIDENT OF INDONESIA Contains letter transactions from 2019-2021 as well ad documents sent …
2022-08-31 1,3 BILLION INDONESIAN SIMCARD REGISTRATION Ministry of Communication and Information Technology of the Republic o…
2022-08-20 26M TELKOM INDONESIA INDIHOME CUSTOMER BROWSING HISTORY Telkom Indonesia (Indihome) customer’s browsing history FILE INFORMAT…

← Back to Ransomtracker

Statistics on this page are computed by Ransomnews from a live leak-site monitoring feed. Numbers update every ten minutes. Operator-written victim descriptions are truncated and shown in snippet form only. Source data: RansomLook (CC BY 4.0), aggregated and adapted by Ransomnews.

Facebook X (Twitter) LinkedIn
© 2026 Ransomnews.com

Type above and press Enter to search. Press Esc to cancel.

Cookies on Ransomnews

We use strictly-necessary cookies to run the site and may use first-party analytics to understand which articles are read. Some pages contain affiliate links — when you click one, the affiliate network sets cookies on the merchant's domain to attribute the referral. See the Cookie Policy and Affiliate Disclosure for detail.

RANSOMNEWS.COM

Tracking the criminal infrastructure of the internet.

Independent coverage of ransomware, breach economics, threat actors, privacy, AI security, and the open-source investigation toolkit.

// Topics

  • News
  • Security
  • Privacy
  • Cybercrime
  • AI
  • OSINT
  • Threat Groups
  • Stealer Logs
  • Ransomtracker
  • Stealercheck
  • FortiBleed Checker

// Site

  • About Us
  • Editorial Team
  • Contact
  • Tip Line
  • Editorial

// Legal

  • Privacy Policy
  • Terms of Service
  • Cookie Policy
  • Funding & Independence
  • RSS Feed
© 2026 Ransomnews.com · Tracking the criminal infrastructure of the internet.