shaoleaks
Active since 2022-11-01
Unverified threat-actor claim — not a regulatory filing
Attribution, victim identity, and counts shown here derive from shaoleaks's public extortion-blog claims, aggregated by ransomware.live. They have not been validated by the victim or any regulator. Treat them as the threat actor's assertion until a regulatory filing or victim disclosure corroborates them.
According to ransomware.live, the group claims:
SHAOleaks is a low-profile data leak and extortion group with minimal public documentation, operating a leak site but lacking detailed analysis by major threat intelligence firms, suggesting a very limited or short-lived operation.
Source: Ransomware.live