Close Menu
  • Home
  • News
  • Security
  • Privacy
  • Cybercrime
    • Threat Groups
    • Ransomware
    • Explainers
    • Stealer Logs
  • AI
  • OSINT
  • Tools
    • Ransomtracker
    • Stealercheck
    • FortiBleed Checker
  • About Us
Facebook X (Twitter) Instagram Threads
Ransomnews
  • Home
  • News
  • Security
  • Privacy
  • Cybercrime
    • Threat Groups
    • Ransomware
    • Explainers
    • Stealer Logs
  • AI
  • OSINT
  • Tools
    • Ransomtracker
    • Stealercheck
    • FortiBleed Checker
  • About Us
Facebook X (Twitter) LinkedIn
Ransomnews

DONUTLEAKS · Threat actor profile

// THREAT ACTOR

DONUTLEAKS_

Dormant

DONUTLEAKS is a ransomware operator tracked through its public data-leak infrastructure. The group operates under the double-extortion model that defines the modern ransomware ecosystem — file encryption combined with the threat of stolen-data publication on a public leak site — and continues to post fresh victim claims as part of an ongoing extortion campaign.

For Ransomnews editorial coverage of DONUTLEAKS — incident write-ups, attribution notes, and additional context — see the Threat Groups archive or run a site search.

44 Victims tracked
0 / 7 Active mirrors
2022-08-24 First listing
2024-10-29 Most recent

Victims by year

  • 2024 16
  • 2023 20
  • 2022 8

Leak site mirrors

7 mirrors tracked, 0 currently reachable. These are criminal-infrastructure URLs — links are deliberately not provided.

  • sbc2zv2qnz5vubwtx3aobfpkeao6l4igjegm3xx7tk5suqhjkp5jxtqd.onion D0N#T__::LEAKS:: snapshot · 2022-10-26 04:04
  • doq32rjiuomfghm5a4lyf3lwwakt2774tkv4ppsos6ueo5mhx7662gid.onion Login - _d0nut.::Files_ snapshot · 2022-10-26 04:05
  • sbc2zv2qnz5vubwtx3aobfpkeao6l4igjegm3xx7tk5suqhjkp5jxtqd.onion snapshot · 2025-01-21 11:25
  • dk4mkfzqai6ure62oukzgtypedmwlfq57yj2fube7j5wsoi6tuia7nyd.onion 404 Not Found snapshot · 2024-12-29 04:26
  • qkbbaxiuqqcqb5nox4np4qjcniy2q6m7yeluvj7n5i5dn7pgpcwxwfid.onion snapshot · 2024-11-19 17:17
  • ieflygyfoezms2wshjpfyfz4hpyxjcdtxejntysvopd7n7cmmnucbkad.onion snapshot · 2024-12-11 11:47
  • 5zhg2foerm66oqdpmhs52pzfkwqx5rcfhje5j5rltctq5cjs653u3rid.onion snapshot · 2024-12-11 11:48

Recent victims

The 50 most recent victims claimed by DONUTLEAKS. Total in the index: 44.

Date listed Victim Description
2024-10-29 Hello. If you can find out the name of your company and country (it is not di…
2024-10-26 ATTENTION! Hello. The chat database was accidentally destroyed. For those who nee…
2024-07-24 Jack "Designer" Sparrow. http://1-sourcedesign.com/ ...and this Canadian company has distinguis…
2024-07-24 Anyone.. Who need some bags? https://www.industrialbolsera.com/ca/index.htm A dubious company for s…
2024-07-21 KickDown ESET company. No overpayments at 0% (renamed and update) This is what this note is now called. It's not about us "making" ESET.…
2024-07-20 ESET. PREMIUM. in preparation for the next goal, eset smart security premium was test…
2024-07-18 all-mode.com A Legacy Of Excellence Founded in 1972 All-Mode Communications inc. ha…
2024-07-17 labline.it Scientific research comes first Diatech Lab Line is not simply the nam…
2024-07-15 valleylandtitleco.com - UPD I-❤️-TEXAS... there could be your advertisement here, but I posted the…
2024-07-03 valleylandtitleco.com I-❤️-TEXAS... there could be your advertisement here, but I posted the…
2024-05-19 Patriot Machine, Updated data leak. Today we consider make public any related data about Patriot Machine o…
2024-05-18 Pittsburgh’s Trusted Orthopaedic Surgeons Hello everyone! We got some not very smart people who was compromise a…
2024-04-05 Good Morning We live in an age of digital waste. We are constantly being sold somet…
2024-03-14 voidinteractive.net you are welcome in our chat You has been pwned. All data related Ready Or Not will be posted here …
2024-03-09 Watsonclinic.com We starting publishing data related medical company from U.S. they was…
2024-02-05 DOD contractors you are welcome in our chat. Hello [visitor_name]! We got some contractors of US Department of Defe…
2023-11-24 carriereindustrial.com Full data leakage will be spreaded via bittorret. Here will be posted …
2023-11-24 Albert, Righter & Tittmann architechts, inc. Full amount of his data will upload to our torrent server. Here will b…
2023-11-10 Who Is MONTY? 😉 https://www.databreaches.net/monti-ransomware-gang-leaks-donut-leaksHe…
2023-11-10 Sidockgroup. Published Established in 1974, we are a full-service firm with offices througho…
2023-10-21 Sidockgroup. Established in 1974, we are a full-service firm with offices througho…
2023-10-05 UPDATED: INC RANSOMWARE... ...and other... Appeal to the blog owners: if you work honestly and d…
2023-10-03 RAT. The contacts of fucker which thought - he can steal from us: ToxID:  …
2023-09-30 INC RANSOMWARE... ...and other... Appeal to the blog owners: if you work honestly and d…
2023-09-19 Gossler, Gobert & Wolters Group. [ 2,6Tb data-leakage coming soon ] We have a lot of information about …
2023-09-19 Agilitas IT Solutions Limited We can say for sure - you seen our meassage which was placed on yours …
2023-07-23 Jackson Township Police Department and Administration. We are prepare some announce. The data of Police Department and FBI Su…
2023-07-10 JANUS Research Group https://www.janusresearch.com JANUS is a technology innovator and engi…
2023-07-10 Garden Hotel NARITA 【公式】インターナショナルガーデンホテル成田- 成田市 成田空港近くの快適で利便性の高いホテルを予約する【公式】インターナショナルガーデンホ…
2023-07-10 Montgomery General Hospital Montgomery General HospitalIt provides the patient the opportunity to …
2023-07-10 Nabtesco Motion Control High Precision Cycloidal Gear Manufacturer | NabtescoNabtesco manufact…
2023-07-10 UnitedLex.com Moving legal to the future. From routine litigation and IP matters to …
2023-07-10 The Travel Network Group The Travel Network Group is the largest in Europe network of commercia…
2023-07-10 Jacklyn Dawson Solicitors Jacklyn Dawson Solicitors is a UK based solicitors and lawyers company…
2023-07-10 Peroni Pompe Since the 1950s, Peroni has focused its activities on the design and p…
2023-07-10 Southwest Healthcare Services Southwest Healthcare Services is a non-profit organization dedicated t…
2022-10-01 Health Care Solutions Group Health Care Solutions Group has been serving the Chicagoland community…
2022-09-28 Evo exhibits Replenishment from not particularly accommodating companies, meet!....…
2022-09-01 Monarchnc
2022-08-24 Enso Detego Who is Enso DetegoDetego, founded in 2011 with offices in the UK, Aust…
2022-08-24 Sando Commercial & Residential Construction · Spain · 2,951 Employees Who is…
2022-08-24 CMZ UK Who is CMZ UKWe manufacture CNC lathes and, honestly, we believe we do…
2022-08-24 PlanET Biogas Solutions Who is PlanET Biogas Solutions PlanET Biogas Solutions was incorporate…
2022-08-24 Sheppard Robson Hello. Christmas, the time of Magic... 2018. The current Chief Builder…

← Back to Ransomtracker

Statistics on this page are computed by Ransomnews from a live leak-site monitoring feed. Numbers update every ten minutes. Operator-written victim descriptions are truncated and shown in snippet form only. Source data: RansomLook (CC BY 4.0), aggregated and adapted by Ransomnews.

Facebook X (Twitter) LinkedIn
© 2026 Ransomnews.com

Type above and press Enter to search. Press Esc to cancel.

Cookies on Ransomnews

We use strictly-necessary cookies to run the site and may use first-party analytics to understand which articles are read. Some pages contain affiliate links — when you click one, the affiliate network sets cookies on the merchant's domain to attribute the referral. See the Cookie Policy and Affiliate Disclosure for detail.

RANSOMNEWS.COM

Tracking the criminal infrastructure of the internet.

Independent coverage of ransomware, breach economics, threat actors, privacy, AI security, and the open-source investigation toolkit.

// Topics

  • News
  • Security
  • Privacy
  • Cybercrime
  • AI
  • OSINT
  • Threat Groups
  • Stealer Logs
  • Ransomtracker
  • Stealercheck
  • FortiBleed Checker

// Site

  • About Us
  • Editorial Team
  • Contact
  • Tip Line
  • Editorial

// Legal

  • Privacy Policy
  • Terms of Service
  • Cookie Policy
  • Funding & Independence
  • RSS Feed
© 2026 Ransomnews.com · Tracking the criminal infrastructure of the internet.