Mister Guns
bd_4764204dd81c8d49 · schema v1 · pii pii-v1
Full breach record for Mister Guns →Threat-actor claim — not a regulatory filing
This row is a claim by the ransomware group Securotrop on its public extortion blog. It has not been validated by the victim or any regulator. Treat attribution and counts as the threat actor's assertion until a regulatory filing or victim disclosure corroborates them.
Source: Ransomware.live
Post text · scraped from the leak site
Status: AWAITING Size: 290 GB
J jump to incidentP pin to compareR raw source
Incident timeline — mostly unverified
? — ?
Breach window unknown
Nov 21, 2025
Claim posted
—
Corroborated · see linked filings
This record's own dates cannot anchor compliance clocks; see the linked filings.
Claim → filing
—
Compliance clock
Not assessable
Linked disclosures
Why this link?Regulatory filings (6) · sorted by filing gap
- Texas State AGbd_18e9186e4888d2ea2026-03-25 · +124dCandidate
- Indiana State AGbd_3bac2bcb569f3ccd2026-03-31 · +130dVerified
- Maine State AGbd_8ffd4b1c42ca7b812026-04-01 · +131dVerified
- Massachusetts State AGbd_f47fe85a2f423a5d2026-04-01 · +131dVerified by operator
Show 2 more filings ↓Show fewer ↑up to 193d gap
- New Hampshire State AGbd_8603fb9c5608cd4a2026-04-06 · +136dVerified
- Texas State AGbd_add46516093b4ca82026-06-02 · +193dVerified
Filing propagation · 6 filings · 5 states
View merged incident ↗Pattern: first filing Mar 25 (TX), last Jun 2 (TX) — a 69-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.
Source ceiling
- actor name
- victim claim
- ransom/leak status
- discovery date
- materiality
- notification
- affected count
- confirmed data types
- compliance clock
The ✕ fields stay blank until a regulatory filing or victim disclosure lands.
securotrop
According to ransomware.live, Securotrop is a ransomware group established in early 2025 that operates within the Qilin affiliate network while maintaining an independent public identity, focusing exclusively on commercial targets and deliberately avoiding healthcare and government entities, with approximately 32 documented victims.