Close Menu
  • Home
  • News
  • Security
  • Privacy
  • Cybercrime
    • Threat Groups
    • Ransomware
    • Explainers
    • Stealer Logs
  • AI
  • OSINT
  • Tools
    • Ransomtracker
    • Stealercheck
    • FortiBleed Checker
  • About Us
Facebook X (Twitter) Instagram Threads
Ransomnews
  • Home
  • News
  • Security
  • Privacy
  • Cybercrime
    • Threat Groups
    • Ransomware
    • Explainers
    • Stealer Logs
  • AI
  • OSINT
  • Tools
    • Ransomtracker
    • Stealercheck
    • FortiBleed Checker
  • About Us
Facebook X (Twitter) LinkedIn
Ransomnews

WORLDLEAKS · Threat actor profile

// THREAT ACTOR

WORLDLEAKS_

Dormant

WORLDLEAKS is a ransomware operator tracked through its public data-leak infrastructure. The group operates under the double-extortion model that defines the modern ransomware ecosystem — file encryption combined with the threat of stolen-data publication on a public leak site — and continues to post fresh victim claims as part of an ongoing extortion campaign.

For Ransomnews editorial coverage of WORLDLEAKS — incident write-ups, attribution notes, and additional context — see the Threat Groups archive or run a site search.

178 Victims tracked
0 / 1 Active mirrors
2025-05-12 First listing
2026-07-22 Most recent

Victims by year

  • 2026 63
  • 2025 115

Leak site mirrors

1 mirror tracked, 0 currently reachable. These are criminal-infrastructure URLs — links are deliberately not provided.

  • worldleaksartrjm3c6vasllvgacbi5u3mgzkluehrzhk2jz4taufuid.onion World Leaks snapshot · 2026-07-30 09:40

Recent victims

The 50 most recent victims claimed by WORLDLEAKS. Total in the index: 178.

Date listed Victim Description
2026-07-22 PinnPACK
2026-07-22 St. Francis Xavier Catholic School System
2026-07-02 Service IT
2026-07-02 Treet Group of Companies
2026-07-01 Starpool
2026-07-01 COMHAR
2026-06-20 Super Finishing
2026-06-20 L'Archevque & Rivest Ltée
2026-06-11 Reliance Group
2026-06-10 First Federal Savings & Loan
2026-06-10 Tata Electronics
2026-06-10 Centra Sota Cooperative
2026-06-09 GDL Transport
2026-06-09 Apollo Pipes
2026-06-09 M1xchange
2026-06-05 Access Dental
2026-06-05 CH Karnchang Public
2026-06-05 United Auto Supply
2026-05-28 American Battery Factory
2026-05-22 BMJ Paperpack
2026-05-12 Bestat Pharmaservices Corp.
2026-05-01 SMTA Sherwood Mutual Telephone Association
2026-05-01 Ceywater Consultants
2026-05-01 Peyton Law Firm
2026-04-29 Mediaworks Kft
2026-04-28 DIME Distribuidora
2026-04-28 Carma Packaging
2026-04-28 Intikom
2026-04-27 Birtcher Anderson & Davis
2026-04-23 Virginia Health Services
2026-04-22 Equatorial Coca-Cola Bottling
2026-04-14 Jersey Fabrication Group LLC
2026-04-08 Deaconess Health System
2026-04-02 National Aerospace Fasteners
2026-04-01 AMBAU Personalservice
2026-04-01 Alamo Heights School District
2026-03-31 San Felipe Del Rio CISD School
2026-03-27 Sheraton Hotel
2026-03-27 CIM
2026-03-27 Orient Petroleum
2026-03-27 Leighton
2026-03-23 Marion Military Institute
2026-03-20 Matthews Real Estate Investment Services
2026-03-20 Winmate Inc.
2026-03-20 Legacy Health LLC
2026-03-20 Finance of America Companies Inc.
2026-03-20 City of Los Angeles (LA)
2026-03-20 Town of Blacksburg
2026-03-20 Pearce Services
2026-03-20 TSN Co., Ltd.

← Back to Ransomtracker

Statistics on this page are computed by Ransomnews from a live leak-site monitoring feed. Numbers update every ten minutes. Operator-written victim descriptions are truncated and shown in snippet form only. Source data: RansomLook (CC BY 4.0), aggregated and adapted by Ransomnews.

Facebook X (Twitter) LinkedIn
© 2026 Ransomnews.com

Type above and press Enter to search. Press Esc to cancel.

Cookies on Ransomnews

We use strictly-necessary cookies to run the site and may use first-party analytics to understand which articles are read. Some pages contain affiliate links — when you click one, the affiliate network sets cookies on the merchant's domain to attribute the referral. See the Cookie Policy and Affiliate Disclosure for detail.

RANSOMNEWS.COM

Tracking the criminal infrastructure of the internet.

Independent coverage of ransomware, breach economics, threat actors, privacy, AI security, and the open-source investigation toolkit.

// Topics

  • News
  • Security
  • Privacy
  • Cybercrime
  • AI
  • OSINT
  • Threat Groups
  • Stealer Logs
  • Ransomtracker
  • Stealercheck
  • FortiBleed Checker

// Site

  • About Us
  • Editorial Team
  • Contact
  • Tip Line
  • Editorial

// Legal

  • Privacy Policy
  • Terms of Service
  • Cookie Policy
  • Funding & Independence
  • RSS Feed
© 2026 Ransomnews.com · Tracking the criminal infrastructure of the internet.